703 matches found
CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
CVE-2003-0136
The CVE-2003-0136 issue affects psbanner in the LPRng package, where a symbolic-link based temporary-file handling flaw in /tmp/before allows local users to overwrite arbitrary files. Public advisories confirm this vulnerability and provide patched updates for multiple distributions: Red Hat (RHS...
CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
CVE-2003-0136: Undefined Security Weakness
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...
CVE-2002-0658
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
CVE-2002-0658
CVE-2002-0658 affects OSSP mm library (libmm) prior to 1.2.0. The vulnerability allows the local Apache user to gain privileges via temporary files, potentially through a symlink attack. Debian advisory DSA-137 and OpenVAS entries confirm mm-related remediation guidance and show the vulnerability...
CVE-2002-0658
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
SAP DB 7.3.00 - Symbolic Link
SAP DB 7.3.00 - Symbolic Link source: https://www.securityfocus.com/bid/6316/info A vulnerability has been discovered in SAP DB that may allow an unprivileged to execute commands with root privileges. The vulnerability is due to insufficient sanity checks by lserver, when attempting to execute th...
CVE-2002-0658
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
CVE-2002-0658
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
security flaw
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
security flaw
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
[NEWS] Lotus Domino Bindsock Arbitrary File Creation Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
CVE-2001-0774
Tripwire 1.3.1, 2.2.1 and 2.3.0 are vulnerable to a local symlink attack that can overwrite arbitrary files in /tmp and may enable privilege escalation. Root cause: temporary files are opened/created without O_EXCL and with predictable names, allowing a non-privileged local attacker to redirect d...
CVE-2001-0774
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files...
CVE-2001-0774: Undefined Security Weakness
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files...
BRU 17.0 - SetLicense Script Insecure Temporary File Symbolic Link
BRU 17.0 - SetLicense Script Insecure Temporary File Symbolic Link // source: https://www.securityfocus.com/bid/3970/info BRU is a commercially available backup software infrastructure available for both UNIX and Linux Operating Systems. It is distributed and maintained by the Tolis Group. When B...
BRU 17.0 - SetLicense Script Insecure Temporary File Symbolic Link
// source: https://www.securityfocus.com/bid/3970/info BRU is a commercially available backup software infrastructure available for both UNIX and Linux Operating Systems. It is distributed and maintained by the Tolis Group. When BRU executes, it creates temporary files insecurely. BRU uses easily...
XMCD vulnerable to arbitrary file overwriting via symlink redirection of temporary file
Overview xmcd is an x11/motif CD playing utility, in the public domain. cda, the command line interface to xmcd, executes with system administrator privileges. It is vulnerable to a symbolic link attack that may allow a local user to obtain administrator privileges. Description cda, the command...