8906 matches found
CVE-2000-0724
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...
CVE-2000-0691
The CVE-2000-0691 issue affects the mgetty package’s faxrunq and faxrunqd components. A local attacker can leverage a symlink attack to create or modify arbitrary files by placing a symlink at /var/spool/fax/outgoing/.last_run that targets a chosen file. This is a local-privilege concern with par...
CVE-2000-0724
CVE-2000-0724 involves the go-gnome Helix GNOME pre-installer. The vulnerability arises from a symlink attack in /tmp that lets local users overwrite arbitrary files, including uudecode, snarf, and some installer files. The described impact is complete confidentiality, integrity, and availability...
CVE-2000-0715
Summary (CVE-2000-0715) : The vulnerability affects Red Hat Linux 6.2’s DiskCheck script (diskcheck.pl), a Powertools utility that alerts on near-capacity disks. Diskcheck.pl creates a temporary file in /tmp with a predictable name and runs with elevated privileges (setuid root). An attacker can ...
CVE-2000-0715
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...
[SECURITY] New version of xpdf released
Package : xpdf Problem type : local exploit Debian-specific: no xpdf as distributed in Debian GNU/Linux 2.2 suffered from two problems: 1. creation of temporary files was not done safely which made xpdf vulnerable to a symlink attack. 2. when handling URLs in documents no checking was done for...
[SECURITY] New version of xpdf released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : xpdf Problem type : local...
CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...
CVE-2000-0092
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used...
CVE-2000-0015
CVE-2000-0015 affects the CascadeView TFTP server. The vulnerability enables local privilege escalation via a symlink attack, with a CVSSv2 base score of 4.6 (Medium) and a Local attack vector, Low complexity, no authentication, and partial impacts to confidentiality, integrity, and availability....
CVE-2000-0015
CascadeView TFTP server allows local users to gain privileges via a symlink attack...
CVE-1999-0959
Technical details about CVE-1999-0959 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are listed here. Monitor for updates from the cited sources.
CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...
CVE-2000-0092
The CVE-2000-0092 entry concerns the BSD make program, where local users can modify files via a symlink attack when the -j option is used. Affected component: make in BSD systems. Root cause: symlink race during parallel builds allows write access to targeted files. Impact: local unauthorized mod...
CVE-2000-0371
Technical details for CVE-2000-0371 are not publicly available in the provided documents. The materials here reiterate that the libmediatool library used by KDE mediatool can allow local symlink-based file creation. Monitor for updates.
CVE-2000-0336
Summary: CVE-2000-0336 affects the OpenLDAP server, where local users can modify arbitrary files via a symlink attack. The root cause described in connected Nessus/Mandrake entries is that OpenLDAP follows symbolic links when creating files, using a default location like /usr/tmp (symlinked to /t...
CVE-2000-0566
makewhatis in Linux man package allows local users to overwrite files via a symlink attack...