8994 matches found
CVE-2005-2582
Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 has world-writable permissions on the log and license directories, enabling local users to delete log files, perform a symlink attack to kavmonitor.log (append to arbitrary files), or delete license keys and disrupt keepup2date. The connected...
CVE-2004-2319
IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 is affected. Two issues are described: (1) local users can create or overwrite files via the /001 log file to onedcu, and (2) local users can read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Root cause details are not ...
CVE-2004-2319
IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...
Kaspersky Antivirus for Unix / Linux weak default file permissions
Weak folder permissions allow to overwrite any system file with symlink attack...
USN-165-1: heartbeat vulnerability
Eric Romang discovered that heartbeat created temporary files in an insecure manner. This could allow a symlink attack to create or overwrite arbitrary files with root privileges as soon as heartbeat is started...
security flaw
sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory...
CVE-2005-2353
CVE-2005-2353 affects Mozilla Thunderbird. The advisory notes that the script run-mozilla.sh, when Thunderbird is built with debugging enabled, can be exploited by local users to create or overwrite arbitrary files via a symlink attack on temporary files. Debian security notices (DSA-1046/DSA-105...
CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2449
CVE-2005-2449 describes a TOCTOU race condition in Gentoo’s sandbox prior to 1.2.11, enabling local users to create or overwrite arbitrary files via a symlink attack on sandboxpids.tmp. Connected advisories (Gentoo GLSA 200507-22) confirm a multiple TOCTOU issue in sandbox and give the remediatio...
CVE-2005-2449
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp...
CVE-2005-2311
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 request1 or 2 request2 temporary files...
CVE-2005-2311
CVE-2005-2311 affects SMS 1.9.2m and earlier. The vulnerability is a local file overwrite via a symlink attack on temporary files (request1 or request2), caused by improper handling of symbolic links in the temporary file paths. Impact is local privilege concerns (I = PARTIAL) with no confidentia...
CVE-2005-2300
Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skypeprofile.jpg temporary file...
CVE-2005-2300
CVE-2005-2300 (Skype) affects Skype versions up to 1.1.0.20. The flaw enables a local user to overwrite arbitrary files via a symlink attack on the temporary file skype_profile.jpg. The NVD entry lists a local access vector with low base score (2.1) and partial integrity impact; confidentiality a...