9185 matches found
CVE-2005-2809: Undefined Security Weakness
silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...
CVE-2005-1915
The vulnerability CVE-2005-1915 affects log4sh up to version 1.2.5, where the log4sh_readProperties function is exploitable. The root cause is a symlink attack on predictable log4sh.$$ filenames, enabling local attackers to overwrite arbitrary files. The CVSS-derived impact is low base score with...
CVE-2005-1915: Undefined Security Weakness
The log4shreadProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames...
iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability
Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=297&type=vulnerabilities August 29, 2005 I. BACKGROUND Adobe Version Cue is a software version tracking system for Adobe products distributed with Adob...
CVE-2005-1856
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack...
CVE-2005-1856: Undefined Security Weakness
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack...
CVE-2005-2670
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in 1 ACE, 2 ARJ, 3 CAB, 4 LZH, 5 RAR, 6 TAR and 7 ZIP files...
DEBIAN-CVE-2005-2672
pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...
CVE-2005-2672: Undefined Security Weakness
pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...
CVE-2004-2462
CVE-2004-2462 affects cplay 1.49 on Linux. The vulnerability is a local symlink attack against the cplay_control temporary file, allowing local users to overwrite arbitrary files. No exploitation details or fixes are provided in the connected documents; remediation information is not available he...
CVE-2004-2462
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplaycontrol temporary file...
CVE-2004-2473
Technical details for CVE-2004-2473 are not publicly available in the provided documents; the entries summarize a local symlink-related overwrite vulnerability without product/version specifics beyond wmFrog 0.1.6 prior to 0.2.0.
CVE-2004-2462: Undefined Security Weakness
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplaycontrol temporary file...
CVE-2004-2473: Improper Link Resolution Before File Access
wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2101: Undefined Security Weakness
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...
CVE-2005-2559
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via 1 shell metacharacters in the epingcount parameter or 2 restricted shell metacharacters such as "" and "&" in the epinghost parameter, which is not handled by the...
CVE-2004-2319: Undefined Security Weakness
IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...
CVE-2005-2559: Undefined Security Weakness
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via 1 shell metacharacters in the epingcount parameter or 2 restricted shell metacharacters such as "" and "&" in the epinghost parameter, which is not handled by the...
GLSA-200508-05 : Heartbeat: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200508-05 Heartbeat: Insecure temporary file creation Eric Romang has discovered that Heartbeat insecurely creates temporary files with predictable filenames. Impact : A local attacker could create symbolic links in the temporary...