CVE-2004-2231: Undefined Security Weakness

Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 persistentstate or 2 env.properties.X temporary files...

CVE-2002-2001

The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...

CVE-2002-2051: Undefined Security Weakness

The processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2240: Undefined Security Weakness

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2231: Undefined Security Weakness

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2180: Undefined Security Weakness

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files...

CVE-2005-1916

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

CVE-2005-1916

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

PT-2005-2872 · Ekg · Ekg

Name of the Vulnerable Software and Affected Versions: ekg versions 2005-06-05 and earlier Description: The issue allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. This is related to the linki.py component in ekg. Recommendations: For ekg versions...

GNATS - gen-index

Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki [email protected] Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system...

CVE-2005-1917

CVE-2005-1917 affects kpopper 1.0 and earlier. Local users can create and overwrite arbitrary files through a symlink attack on the .popper-new temporary file due to insecure temporary file handling. Impact is described as low; exploitation is indicated in public advisories. Affected versions: kp...

CVE-2005-1917: Undefined Security Weakness

kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file...

[SA15877] Avaya CMS/IR lpadmin Arbitrary File Overwrite Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2054

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

CVE-2005-2054

Affected software: RealPlayer 10/10.5 (6.0.12.1040–1069) and RealOne Player v1/v2. Description indicates a vulnerability that could let remote attackers overwrite arbitrary files or run arbitrary ActiveX controls via a crafted MP3 file. Root cause and patch details are not provided in the documen...