8906 matches found
CVE-1999-0333
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack...
CVE-1999-0857
FreeBSD gdc program allows local users to modify files via a symlink attack...
CVE-1999-0860
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack...
CVE-2000-0005
HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...
CVE-1999-0480
Midnight Commander 4.x is affected by a local denial of service via a symlink attack. The connected PT-1999-1160 entry confirms the issue in Midnight Commander 4.x and attributes it to a symlink-based condition exploitable by a local attacker to trigger DoS. No remediation or patched versions are...
CVE-1999-0114
CVE-1999-0114 (Elm 2.4 mail package) : The Elm mail package (elm-2.4) is affected via the filter command, where a symlink attack lets local users execute commands as other users and read other users’ files. Root cause is a directory/file permission/symlink handling flaw in the filter command. Imp...
CVE-2000-0067
CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...
CVE-1999-0857
CVE-1999-0857 affects the FreeBSD gdc program, where local users can modify files via a symlink attack. The vulnerability stems from a symlink-related flaw allowing local privilege impact (integrity partially). The NVD entry lists a LOW 2.1 base score with local attack vector and no explicit expl...
CVE-1999-0333
CVE-1999-0333 affects HP OpenView OmniBack II. The issue enables remote root execution via spoofing and local root via a symlink attack. Affected product/versions are not exhaustively specified in the provided documents, but Red Hat/NVD entries concur on the vulnerability description. Remediation...
CVE-1999-0411
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access...
CVE-1999-0480
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack...
[SECURITY] New version of apcd released
Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...
CVE-2000-0107
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...
[SECURITY] New version of apcd released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 1, 2000 - ------------------------------------------------------------------------ Package: apcd Vulnerability type:...
autobuse-angel.txt
Hi, This weekend I decided to play around with a couple of network management tools on securityfocus.com; Angel http://www.paganini.net/angel/, and Autobuse http://www.picante.com/gtaylor/download/. Unfortunately, upon review of the source, I noticed a bad trend. Both tools handle temporary files...
CVE-2000-0092
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used...
CVE-2000-0090
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack...
CVE-2000-0067
CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...
PT-2000-1059 · Cybercash · Cybercash Merchant Connection Kit
Name of the Vulnerable Software and Affected Versions: CyberCash Merchant Connection Kit MCK affected versions not specified Description: The issue allows local users to modify files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains ...