8958 matches found
CVE-2003-0193
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...
CVE-2003-0193
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...
CVE-2003-0193
The CVE-2003-0193 issue affects xlsview (part of catdoc) prior to 0.91.5, where msxlsview.sh could be abused via a symlink to overwrite arbitrary files with a predictable temporary name (word$$.html), enabling local privilege effects. Debian/DSA-575-1 fixes this by updating catdoc to a newer rele...
CVE-2004-0388
The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0388
The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...
security flaw
Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...
wgetuhoh.txt
Tested software: Wget 1.9, Wget 1.9.1 Wget checks for the presence of a file with the same name of the one invoqued at the command line, if the file exists, then it saves the downloaded file with a different name. The problem is that Wget does not lock the file, and directly writes to it. So...
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
CVE-2004-0422
CVE-2004-0422 concerns the flim Emacs library, where temporary files are created insecurely (before 1.14.3), allowing a local user to overwrite arbitrary files via a symlink attack. Public advisories document that this could enable local privilege impact, with a CVSS v2 base score of 2.1 (LOW). R...
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
CVE-2004-0233
CVE-2004-0233 describes a symlink vulnerability in the utempter library, where device names containing .. (dot dot) directory traversal can enable local users to overwrite arbitrary files via a symlink attack when an application trusts utmp/wtmp. Public documents from Slackware, Gentoo, Gentoo GL...
CVE-2004-0233
Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file...
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file...
CVE-2004-0404
CVE-2004-0404 affects the logcheck utility. A local attacker can exploit a symlink attack in a temporary directory under /var/tmp to overwrite arbitrary files. The issue is present in logcheck before version 1.1.1. The vulnerability is documented across multiple sources (NVD/NVD-derived entries, ...
CVE-2004-0423
CVE-2004-0423 affects ssmtp 2.50.6 and earlier. The log_event function allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file, enabling local privilege impact as described. The Connected documents provide the same description across multiple sourc...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...