8958 matches found
CVE-2000-0067
CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...
CVE-1999-0857
FreeBSD gdc program allows local users to modify files via a symlink attack...
CVE-1999-0480
Midnight Commander 4.x is affected by a local denial of service via a symlink attack. The connected PT-1999-1160 entry confirms the issue in Midnight Commander 4.x and attributes it to a symlink-based condition exploitable by a local attacker to trigger DoS. No remediation or patched versions are...
[SECURITY] New version of apcd released
Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...
CVE-2000-0107
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...
[SECURITY] New version of apcd released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 1, 2000 - ------------------------------------------------------------------------ Package: apcd Vulnerability type:...
autobuse-angel.txt
Hi, This weekend I decided to play around with a couple of network management tools on securityfocus.com; Angel http://www.paganini.net/angel/, and Autobuse http://www.picante.com/gtaylor/download/. Unfortunately, upon review of the source, I noticed a bad trend. Both tools handle temporary files...
CVE-2000-0092
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used...
CVE-2000-0090
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack...
CVE-2000-0067
CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...
PT-2000-1059 · Cybercash · Cybercash Merchant Connection Kit
Name of the Vulnerable Software and Affected Versions: CyberCash Merchant Connection Kit MCK affected versions not specified Description: The issue allows local users to modify files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains ...
CVE-2000-0080
AIX techlibss allows local users to overwrite files via a symlink attack...
CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories...
CVE-1999-0730
CVE-1999-0730 concerns the zsoelim program in the Debian man-db package, where a symlink attack allows local users to overwrite files. The vulnerability is described across multiple connected records (Red Hat, CVE listing, NVD) as a local attack with potential complete impact on confidentiality, ...
CVE-1999-0963
The CVE-1999-0963 entry concerns FreeBSD’s mount_union utility, where a symlink attack enables local users to gain root privileges. Reported impact is local privilege escalation with full confidentiality, integrity, and availability implications as per CVSS: local access, low attack complexity, n...
CVE-1999-0689
The CVE-1999-0689 entries describe a vulnerability in the CDE dtspcd daemon where local users can trigger arbitrary command execution through a symlink attack. The connected Red Hat and CVE records repeat the same description. The sources do not provide specific affected versions, vendor/product ...
CVE-1999-0735
CVE-1999-0735 affects KDE K-Mail, where local users can gain privileges via a symlink attack in temporary user directories. The connected documents reiterate this description but do not provide deeper technical details (e.g., affected versions, root cause specifics, exploit steps, or fixes). No r...
CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories...