CVE-1999-1386

Perl 5.00404 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file...

CVE-2001-0823

The CVE-2001-0823 entry documents a local privilege escalation in the Performance Co-Pilot (PCP) package via the pmpost utility, prior to version 2.2.1-3. An attacker can exploit a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR) to gain root/privilege access. The underly...

CVE-1999-1139

Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...

CVE-1999-1407

CVE-1999-1407 affects the ifdhcpc-done script used for configuring DHCP on Red Hat Linux 5. The vulnerability arises from a symlink attack against the dhcplog file, allowing local users to append text to arbitrary files. The provided sources describe the vulnerability and impact (local, partial i...

CVE-2000-0027

IBM Network Station Manager NetStation is affected by CVE-2000-0027: local users can gain privileges via a symlink attack. The flaw involves improper handling of symbolic links that enables privilege escalation on affected systems. The provided documents describe the vulnerability but do not spec...

CVE-2001-0625

The CVE-2001-0625 issue affects Computer Associates InoculateIT 6.0, where ftpdownload is vulnerable to a local symlink attack on /tmp/ftpdownload.log. This allows a local attacker to overwrite arbitrary files. The vulnerability is triggered by manipulating filesystem paths used by ftpdownload, e...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2002-0087

CVE-2002-0087 affects Lotus Domino 5.07 on Solaris. A local user can create arbitrary files through a symlink attack on temporary files used by bindsock, enabling file creation via local access. No remediation details are provided in the supplied documents.

Another local root vulnerability during installation of Tarantella Enterprise 3.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Larry W. Cashdollar Vapid Labs 2/18/2002 Another local root vulnerability during installation of Tarantella Enterprise 3. During installation a "twirling / | - " text graphic is displayed you remember them from the shareware games in DOS days.. they...

CVE-2001-1041

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace .trc file that is created in an alternate home directory identified by the ORACLEHOME environment variable...

CVE-2001-1000

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file...

CVE-2001-1000

The CVE-2001-1000 issue affects Merit AAA Server’s rlmadmin RADIUS management utility (versions including 3.8M and 5.01). The vulnerability arises from a symlink attack on the rlmadmin.help file, allowing local users to read arbitrary files. The documented impact is local access with partial conf...

CVE-2001-1041

CVE-2001-1041 affects Oracle 8.0.x, 8.1.x, and 9.0.1. The vulnerability arises from a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by ORACLE_HOME, enabling local users to overwrite arbitrary files. The root cause is the mishandling of...

CVE-2002-0044

GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files...

CVE-2001-0887

xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files...

CVE-1999-1091

UNIX news readers tin and rtin create the /tmp/.tinlog file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack...

cdrdao insecure filehandling

-- Description -- There are several security-related Bugs in the distributed Debian SID Package of CDRDAO, a program to write audio or mixed mode CD-Rs in disk-at-once mode. /usr/bin/cdrdao is setuid-Root by default. -- Version -- Name: Cdrdao Version: 1.1.5 Autor: Andreas Mueller [email protected]...

CVE-2001-1487

popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option...

CVE-2001-1479

smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...

CVE-2001-1448

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...