8918 matches found
CVE-2003-0898
IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on 1 db2job and 2 db2job2...
CVE-2003-1139
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...
CVE-2003-0872
The CVE-2003-0872 issue affects OpenServer prior to version 5.0.6. The vulnerability arises from insecure handling of temporary files in several OpenServer scripts, enabling local users to overwrite files via a symlink attack on /tmp and perform other unauthorized activities. According to the CVE...
CVE-2003-0872
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files...
CVE-2003-0739
VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack...
CVE-2003-0847
SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file...
CVE-2003-0847
CVE-2003-0847 : The SuSEconfig.susewm component in the susewm package on SuSE Linux 8.2Pro is vulnerable to a local, symlink-based attack on the susewm.$$ temporary file, enabling local users to overwrite arbitrary files. The vulnerability is described as a local-priority issue with partial confi...
CVE-2003-0844
modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via 1 a symlink attack on predictable temporary filenames on Unix systems, or 2 an NTFS hard link on Windows systems when the...
CVE-2003-0844
The CVE affects mod_gzip 1.3.26.1a and earlier. In debug mode without the Apache log, it allows local users to overwrite arbitrary files via (1) a symlink attack on predictable temporary filenames on Unix, or (2) an NTFS hard link on Windows when the policy to strengthen default permissions is no...
CVE-2003-0846
SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .javawrapper temporary file...
CVE-2003-0846
CVE-2003-0846 affects SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro. The issue enables local users to overwrite arbitrary files via a symlink attack on the temporary file .java_wrapper, indicating a local elevation/impact on file integrity. The CVSS metrics in the initial entry...
PT-2003-1911 · Microsoft +1 · Ntfs +3
Name of the Vulnerable Software and Affected Versions: mod gzip versions 1.3.26.1a and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on predictable temporary filenames on Unix systems, or an NTFS hard link on Windows systems when the "Strength...
Local root exploit in SuSE Linux 7.3Pro
Affected: SuSE Linux 7.3Pro Not affected: SuSE Linux 8.2Pro, non-SuSE distributions Possibly affected: other SuSE distributions Vulnerable package: javarunt Impact: Local user can gain root privileges Exploit type: Symlink attack Release...
Local root exploit in SuSE Linux 8.2Pro
Affected: SuSE Linux 8.2Pro Not affected: SuSE Linux 7.3Pro, non-SuSE distributions Possibly affected: other SuSE distributions Vulnerable package: susewm Impact: Local user can gain root privileges Exploit type: Symlink attack Release...
CVE-2003-1081
Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file...
CVE-2003-0739
VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack...
CVE-2003-0739
CVE-2003-0739 affects VMware Workstation 4.0.1 for Linux (build 5289 and earlier). The issue allows local users to delete arbitrary files via a symlink attack. Impact is described as PARTIAL for confidentiality, integrity, and availability, with local access and no authentication required. The ro...
CVE-2003-0603
Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions...