8990 matches found
CVE-2005-1119
Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files...
CVE-2005-1119
CVE-2005-1119 affects Sudo VISudo 1.6.8 and earlier. The vulnerability arises from a symlink attack on temporary files, enabling local users to corrupt arbitrary files. Impact is local privilege concern (I = Partial) with no confidentiality/vitality impact, per available data. The provided docume...
CVE-2004-1181
htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-0004
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...
CVE-2005-0004
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...
CVE-2004-0824
CVE-2004-0824 affects Mac OS X PPPDialer (versions 10.2.8–10.3.5). The issue is a local, non-privileged attacker could exploit a symlink in PPPDialer log files to overwrite system files, potentially impacting integrity. cvss2 base score 2.1 (Low), with local access required and no authentication....
CVE-2004-0824
PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files...
Debian DSA-707-1 : mysql - several vulnerabilities
Several vulnerabilities have been discovered in MySQL, a popular database. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0957 Sergei Golubchik discovered a problem in the access handling for similar named databases. If a user is granted privileges...
DSA-707-1 mysql - several
Bulletin has no description...
CVE-2005-1066
Pine 4.62 and earlier (University of Washington Pine) is affected by a race condition in rpdump that allows local users to overwrite arbitrary files via a symlink attack, leading to Local File Write. Root cause: race window in rpdump during file operations. Impact: potential overwriting of sensit...
CVE-2005-1066
Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack...
CVE-2005-1065
The vulnerability CVE-2005-1065 affects tetex in Novell Linux Desktop 9. An attacker with local access can determine the existence of arbitrary files via a symlink attack in /var/cache/fonts, enabling partial confidentiality impact without authentication. The common root cause is a symlink handli...
CVE-2005-1066
Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack...
portupgrade -- insecure temporary file handling vulnerability
Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...
[SA14899] Pine rpdump File Creation Race Condition Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Pine rpdump File Creation Race Condition Vulnerability...
Debian DSA-704-1 : remstats - tempfile, missing input sanitising
Jens Steube discovered several vulnerabilities in remstats, the remote statistics system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0387 When processing uptime data on the unix-server a temporary file is opened in an insecure fashion which cou...
CVE-2005-1025
The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library...
CVE-2005-1025
CVE-2005-1025 : The AS/400 4.3 FTP server, when running in IFS mode, is vulnerable to a symlink attack via RCMD and the ADDLNK utility, enabling remote attackers to obtain sensitive information from the QSYS.LIB library. The issue is documented with a MEDIUM severity (CVSS v2 base score 5.0). No ...