Design/Logic Flaw

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...

CVE-2007-3103

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...

CVE-2007-3103

The CVE-2007-3103 issue affects the X.Org X11 xfs font server on Linux, caused by a race in the startup script that handles a temporary file in /tmp/.font-unix. A local user could abuse a symlink to modify file permissions, potentially elevating privileges. Exploitation details are not provided b...

security flaw

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...

security flaw

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...

Design/Logic Flaw

The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...

CVE-2007-2837

The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...

CVE-2007-2837

The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...

CVE-2007-2837

The CVE-2007-2837 issue affects FireFlier 1.1.6 (fireflier-server). The getRule and getChains functions in server/rules.cpp allow local users to exploit an unsafe temporary file handling (symlink to /tmp/fireflier.rules) to overwrite arbitrary files. The Debian advisory DSA-1326-1 documents the f...

Arbitrary file deletion

The populateconns function in src/populateconns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file...

CVE-2007-2838

The populateconns function in src/populateconns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file...

CVE-2007-2838

The populateconns function in src/populateconns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file...

CVE-2007-2838

The populateconns function in src/populateconns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file...

CVE-2007-2838

CVE-2007-2838 affects gsambad 0.1.4, where the populate_conns.c routine permits local users to overflow/overwrite arbitrary files by a symlink attack on the /tmp/gsambadtmp temporary file. The underlying issue is unsafe creation/use of temporary files, enabling local privilege concerns (no remote...

CVE-2007-2837

The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...

CVE-2007-3337

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA Computer Associates products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file...

Code injection

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA Computer Associates products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file...

CVE-2007-3337

CVE-2007-3337 concerns the Ingres database server (2006 9.0.4 and earlier) used in multiple CA products. A local user can abuse the setuid root binary “wakeup” by creating a symbolic link to the file alarmwkp.def, causing the binary to truncate arbitrary files in the current directory. The issue ...

FreeBSD : p5-Mail-SpamAssassin -- local user symlink-attack DoS vulnerability (8092b820-1d6f-11dc-a0b2-001921ab2fa4)

SpamAssassin website reports : A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions 3.1.x, 3.2.0, and SVN trunk. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...

spamassassin symlink attack

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...