8906 matches found
CVE-1999-0836
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack...
CVE-1999-0864
CVE-1999-0864 involves UnixWare programs that dump core; a local user can modify files via a symlink attack on the ./core.pid file. The description notes a local-privilege/impact vector but provides no remediation or explicit exploit details in the supplied documents. The connected documents do n...
CVE-1999-0836
Technical details about CVE-1999-0836 are not publicly available in the provided documents. Monitor for updates from official advisories; the material here only notes a symlink attack enabling local file modification on UnixWare uidadmin.
CVE-2000-0270
The CVE affects Emacs 20’s make-temp-name Lisp function, which creates temporary files with predictable names, enabling a symlink attack. This is described by CVE-2000-0270 in NVD; connected sources note the same vulnerability. The available documents do not specify a patch version or workaround....
CVE-2000-0270
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack...
CVE-1999-0803
CVE-1999-0803 affects the fwluser script in AIX eNetwork Firewall. A local user can exploit a symlink attack to write to arbitrary files. The documented impact is limited to local access with partial integrity impact and no confidentiality/availability impact, with the CVSS v2 base score 2.1 (LOC...
CVE-1999-0957
MajorCool mjkeycache program allows local users to modify files via a symlink attack...
CVE-1999-0957
The affected software is MajorCool mj_key_cache. The vulnerability arises from a symlink attack that allows local users to modify files. The connected PT-1997-1171 entry notes affected versions are not specified and provides no information about a fix; no explicit mitigation is documented in the ...
CVE-1999-0803
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack...
CVE-2000-0336
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack...
CVE-1999-0961
HPUX sysdiag contains a local privilege escalation where an unprivileged user can gain root via a symlink attack during log file creation. The Root Cause is a symlink handling vulnerability in the log file creation path. Affected software is HP-UX sysdiag (no specific version ranges provided in t...
CVE-2000-0107
The CVE-2000-0107 entry concerns the Linux apcd program, which is vulnerable to a local symlink attack that lets an authenticated local attacker modify arbitrary files. The root cause is improper handling of symlinks, enabling file overwrites via symlink manipulation. The available references con...
CVE-1999-0676
sdtcmconvert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack...
CVE-2000-0270
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack...
CVE-2000-0107
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...
CVE-1999-0676
CVE-1999-0676 affects Solaris 2.6, where the sdtcm_convert component allows a local user to overwrite sensitive files via a symlink attack. The vulnerability arises from a symlink handling weakness in sdtcm_convert, enabling a local attacker to target files the process should not write to. The co...
CVE-1999-0961
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...
CVE-2000-0224
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...
CVE-2000-0031
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack...
CVE-2000-0031
The CVE-2000-0031 issue affects the initscripts package in Red Hat Linux and is caused by a symlink attack that allows local users to gain privileges. Connected sources (NVD, PT-2000-1038) confirm local privilege escalation via a symlink-related flaw in initscripts; no explicit fix/version detail...