9201 matches found
CVE-1999-1263
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file...
CVE-1999-1328
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack...
CVE-2001-0625
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...
CVE-2001-0730
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / slash in the Host: header...
CVE-1999-1177
Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. dot dot in the pathname for an upload operation...
CVE-1999-1139
CVE-1999-1139 describes a local privilege escalation in HP-UX 11.0 and earlier via a symlink attack on IOERROR.mytty, allowing local users to overwrite arbitrary files and gain root privileges. Affected component is HP-UX system tooling related to Character-Terminal User Environment (CUE). The co...
CVE-1999-1386: Improper Link Resolution Before File Access
Perl 5.00404 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file...
CVE-2001-0730: Undefined Security Weakness
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / slash in the Host: header...
CVE-2001-1010: Undefined Security Weakness
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. dot dot attack on the page parameter...
CVE-2001-0774: Undefined Security Weakness
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files...
CVE-2001-0625: Undefined Security Weakness
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...
CVE-1999-1328: Undefined Security Weakness
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack...
CVE-1999-1565: Undefined Security Weakness
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2002-0044
GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files...
Maelstrom 1.4.3 abartity file overwrite
Program: Maelstrom Version: 1.4.3 Distribution: RedHat 7.1 When trying to break stuff, ltracing Maelstrom showed the following: fopen"/tmp/f", "w" = 0x08081f58 fprintf0x08081f58, "Main program = sn", "Maelstrom" = 25 fclose0x08081f58 = 0 Which made we wonder if it followed symbolic links, by doin...
CVE-2002-1600
Directory traversal vulnerability in Mike Spice's My Classifieds classifieds.cgi before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter...
[PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache
PenTest Limited www.pentest-limited.com Security Advisory Vulnerabilities in Oracle9iAS Web Cache Author: Mark Rowe [email protected] Pete Finnigan [email protected] Date: 7th January 2002 Reference: ptl-2002-01...
CVE-2001-1448
Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...