8995 matches found
security flaw
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
Arbitrary file deletion
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
CVE-2006-1231
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
CVE-2006-1231
CVE-2006-1231 affects CAPI4HylaFAX 1.3 when compiled with GENERATE_DEBUGSFFDATAFILE. The vulnerability arises from a symlink attack on the temporary file c2faxrecv_dbgdatafile.sff, enabling local users to modify arbitrary files. The description clearly states local access and a file-override outc...
CVE-2006-1231
Removed by vendor...
CVE-2006-1231
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
Code injection
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack...
CVE-2006-0667
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack...
CVE-2006-0667
lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack...
CVE-2005-2714
CVE-2005-2714 affects Apple Mac OS X passwd on 10.3.x before 10.3.9 and 10.4.x before 10.4.5. A local attacker can exploit a symlink to the temporary file /tmp/.pwtmp. to overwrite arbitrary files, potentially gaining elevated privileges. The iDefense advisory describes two related issues: tempor...
CVE-2005-2714
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.PID temporary file...
[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:051 http://www.mandriva.com/security/ Package : gettext Date : February 28, 2006 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The Trustix developers discovered temporary file...
CVE-2003-1294
Xscreensaver before 4.15 creates temporary files insecurely in 1 driver/passwd-kerberos.c, 2 driver/xscreensaver-getimage-video, 3 driver/xscreensaver.kss.in, and the 4 vidwhacker and 5 webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2003-0885
Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...
CVE-2003-1294
Xscreensaver before 4.15 creates temporary files insecurely in 1 driver/passwd-kerberos.c, 2 driver/xscreensaver-getimage-video, 3 driver/xscreensaver.kss.in, and the 4 vidwhacker and 5 webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2003-0885
CVE-2003-0885 concerns Xscreensaver 4.14, where leftover debugging code causes insecure temporary file creation in the (1) apple2, (2) xanalogtv, and (3) pong screensavers. The described flaw enables local users to overwrite arbitrary files via a symlink attack, representing a local file-overwrit...
CVE-2003-1294
CVE-2003-1294 affects XScreenSaver prior to 4.15, where temporary files are created insecurely in multiple components (driver/passwd-kerberos.c, driver/xscreensaver-getimage-video, driver/xscreensaver.kss.in, vidwhacker, webcollage). This enables a local attacker to overwrite arbitrary files via ...
CVE-2003-0885
Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...
USN-254-1: noweb vulnerability
Javier Fernández-Sanguino Peña discovered that noweb scripts created temporary files in an insecure way. This could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user running noweb...