CVE-2000-0031

The CVE-2000-0031 issue affects the initscripts package in Red Hat Linux and is caused by a symlink attack that allows local users to gain privileges. Connected sources (NVD, PT-2000-1038) confirm local privilege escalation via a symlink-related flaw in initscripts; no explicit fix/version detail...

CVE-1999-0893

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack...

CVE-2000-0029

Technical details about CVE-2000-0029 are not publicly provided in the supplied documents; only the basic description is available. Monitor for updates.

CVE-1999-0786

The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...

CVE-1999-0893

CVE-1999-0893 relates to SCO OpenServer and involves the userOsa component. The connected PT-1999-1441 entry describes a local vulnerability where an attacker can exploit a symlink race to corrupt files via userOsa. It notes that affected SCO OpenServer versions are not specified and provides no ...

CVE-2000-0029

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack...

CVE-2000-0154

The CVE-2000-0154 entry concerns the ARCserve agent in UnixWare, where a local attacker can modify arbitrary files via a symlink attack. The available connected records confirm Tcl/UnixWare context and the vulnerability’s local access vector with a high attack complexity and low base score (NVD m...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

[SECURITY] New version of make released

Package: make Vulnerability type: symlink attack Debian-specific: no The make package as shipped in Debian GNU/Linux 2.1 is vulnerable to a race condition that can be exploited with a symlink attack. make used mktemp while creating temporary files in /tmp. and that is a known potential security...

[SECURITY] New version of make released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 20, 2000 - ------------------------------------------------------------------------ Package: make Vulnerability type:...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-1999-0434

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

CVE-1999-0988

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack...

CVE-2000-0067

The CVE refers to CyberCash Merchant Connection Kit (MCK). Affected component: MCK. Vulnerability: local users can modify files via a symlink attack (symlink race condition) as described in CVE-2000-0067. The PT-2000-1059 entry confirms the issue is related to local access and notes that affected...

CVE-2000-0005

HP-UX aserver program allows local users to gain privileges via a symlink attack...

CVE-1999-0114

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack...

CVE-1999-0988

The CVE-1999-0988 entry describes a local-file read vulnerability in UnixWare pkgtrans where a symlink attack allows a local user to read arbitrary files. Affected component: UnixWare pkgtrans (local-exploit path). Root cause: symlink race enabling leakage of file contents. Impact: Confidentialit...

CVE-1999-0434

The CVE-1999-0434 entry documents a vulnerability in the XFree86 xfs command where a symlink attack enables local users to create files in restricted directories, potentially leading to privilege escalation or a denial of service. Connected sources corroborate the issue as a symlink-based file cr...

CVE-1999-0860

Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...