8989 matches found
CVE-2005-1759
Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...
CVE-2002-1764
CVE-2002-1764 affects acroread/Adobe Reader 4.05 on Linux . The vulnerability is a local file overwrite via a symlink attack on temporary files, enabling a local user to overwrite arbitrary files. The connected OpenVAS entry corroborates a symlink attack vulnerability in Adobe Reader. No further ...
CVE-2002-1764
acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2001-1479
Sun Management Center (SMC) 2.0 on Solaris 8 is affected. A local user can delete arbitrary files by exploiting a symlink on /tmp/smc$SMC_PORT, as described in CVE-2001-1479. The issue enables LOCAL access with low complexity and partial integrity impact; no remediation details are provided in th...
CVE-2001-1487
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option...
CVE-2001-1479
smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...
CVE-2001-1487
CVE-2001-1487 affects Qualcomm Qpopper 4.0 and earlier. The popauth utility can be exploited via a symlink attack on the -trace option, allowing local users to overwrite arbitrary files and execute commands as the pop user. Impact is described as partial confidentiality, integrity, and availabili...
CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack...
CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack...
CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack...
DEBIAN-CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack...
CVE-2005-1993
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack...
CVE-2005-1993
CVE-2005-1993 describes a local privilege-escalation race in sudo’s pathname validation. In affected versions (sudo 1.3.1–1.6.8p8), a user with sudo privileges could trigger a symlink race when an ALL entry appears after the user’s sudoers entry, potentially executing commands as root. Public adv...
webapp-config: Insecure temporary file handling
Background webapp-config is a Gentoo Linux utility to help manage the installation of web-based applications. Description Eric Romang discovered webapp-config uses a predictable temporary filename while processing certain options, resulting in a race condition. Impact Successful exploitation of t...
GLSA-200506-13 : webapp-config: Insecure temporary file handling
The remote host is affected by the vulnerability described in GLSA-200506-13 webapp-config: Insecure temporary file handling Eric Romang discovered webapp-config uses a predictable temporary filename while processing certain options, resulting in a race condition. Impact : Successful exploitation...
CVE-2005-1944
xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file in /tmp...
CVE-2005-1944
This CVE affects xmysqladmin 1.0 and earlier. The vulnerability arises from a symlink attack on a database backup file located in /tmp, enabling local users to delete arbitrary files. The available sources confirm the component (xmysqladmin) and the underlying cause (symlink in /tmp backup file) ...
CVE-2005-1725
CVE-2005-1725 affects Apple Mac OS X systems running launchd 106 prior to 10.4.2 (reported for 10.4.x up to 10.4.1). The issue is a local, symlink-based attack on the socket file in an insecure temporary directory that allows a local user to overwrite arbitrary files. The vulnerability stems from...