CVE-2004-0059: Undefined Security Weakness

Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. dot dot sequences in the filename parameter of a Content-Disposition: header...

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files

include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n"; printf"\t-------------------------------------------------------------...

CVE-2003-0872: Undefined Security Weakness

Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files...

CVE-2003-0656

eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile...

DEBIAN-CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0524

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

[SECURITY] [DSA-362-1] New mindi packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 362-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 2nd, 2003 http://www.debian.org/security/faq -...

CVE-2003-0606

sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

[SECURITY] [DSA-353-1] New sup packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 353-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 29th, 2003 http://www.debian.org/security/faq -...

DEBIAN-CVE-2003-0381

Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script...

CVE-2003-0440: Undefined Security Weakness

The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0517: Improper Link Resolution Before File Access

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0524: Undefined Security Weakness

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

CVE-2003-0367

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0282: Undefined Security Weakness

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . dot characters, which are filtered and result in a ".." sequence...

CVE-2003-0207

CVE-2003-0207 affects the ps2epsi component in gs-common. The root cause is insecure creation of temporary files when ps2epsi invokes ghostscript, which can allow a local attacker to overwrite arbitrary files. The vulnerability is documented in Debian DSA-286-1 and is reflected in multiple feeds ...

CVE-2002-0174

IRIX nsd symlink vulnerability (CVE-2002-0174): on SGI IRIX versions prior to 6.5.11, nsd can be tricked via a symlink attack on /var/tmp/nsd.dump to damage/modify the dump file when the nsd process receives USR1. Local users could potentially gain root privileges. The advisory fixes/change is to...

CVE-2002-0178: Undefined Security Weakness

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands...

CVE-2002-1344

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing 1 /absolute/path or 2 .. dot dot sequences...

CVE-2002-0044

CVE-2002-0044 affects GNU Enscript up to version 1.6.1. The vulnerability arises from insecure handling of temporary files (symlink-based attack), enabling local users to overwrite arbitrary files owned by the Enscript user. Public references in Debian DSA-105-1, Mandrake MDKSA-2002:010, and (old...