CVE-2002-1193

tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files...

CVE-2003-0120

adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...

CVE-2004-0160

CVE-2004-0160 affects the synaesthesia package. The vulnerability allows a local unprivileged user to cause configuration-file creation/modification with root ownership via a symlink attack on the config file, enabling potential code execution with root privileges. Debian and OpenVAS advisories d...

CVE-2002-1119

CVE-2002-1119 affects Python (os._execvpe in os.py) in Python 2.2.1 and earlier, where temporary files are created with predictable names, enabling local users to execute arbitrary code via a symlink attack. Connected sources (Debian DSAs and Red Hat/Mandrake/Nessus entries) confirm the insecure ...

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

CVE-2004-0115

VirtualPCServices in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServicesLog temporary file...

CVE-1999-1486

sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0160

Removed by vendor...

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

CVE-2002-1517

fsrefs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file...

CVE-2001-1066

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2002-1199

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments...

CVE-2003-0120

The CVE-2003-0120 issue affects adb2mhc in the mhc-utils package prior to version 0.25+20010625-7.1. The root cause is a symlink attack in a default temporary directory with a predictable name, allowing local users to overwrite arbitrary files they can write to. This is a local-privilege affectin...

CVE-2002-1550

CVE-2002-1550 affects IBM AIX via dump_smutil.sh, where local users can overwrite arbitrary files through a symlink attack on temporary files. The vulnerability is caused by improper handling of temporary file names in the script, enabling a local-privilège-claiming overwrite. Documented impact i...

CVE-2002-1514

gdslockmgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "iscinit1.X" temporary file, as demonstrated by modifying the xinetdbd file...

CVE-2002-1193

CVE-2002-1193 affects tkmail prior to 4.0beta9-8.1, where local users can create or overwrite files as other users via a symlink attack on temporary files. The concrete impact is local privilege-related file manipulation. The cited sources confirm the vulnerability exists in tkmail’s handling of ...

CVE-2002-1517

The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...

CVE-2002-0662

scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files...

CVE-2002-1550

dumpsmutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-0108

The CVE-2004-0108 entry concerns the isag utility (used for processing sysstat data) and describes a local privilege issue where a symlink attack on temporary files allows local users to overwrite arbitrary files. The vulnerability arises from insecure temporary file handling rather than remote e...