8909 matches found
CVE-2010-3095
mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313...
CVE-2010-3095
CVE-2010-3095 affects MailScanner; versions older than 4.79.11-2.1 are vulnerable to a local symlink attack allowing a local user to overwrite arbitrary files. Root cause is an incomplete fix for CVE-2008-5313. Debian/Red Hat/Ubuntu advisories indicate the fix is in 4.79.11-2.1 (and newer) for ba...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
DEBIAN-CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
Design/Logic Flaw
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
atop: symlink attack possible due to insecure tempfile handling...
CVE-2011-3618
CVE-2011-3618 relates to a symlink attack caused by insecure tempfile handling in the tool described as “atop.” The linked records (NVD, OSV, Debian/Ubuntu trackers and others) consistently cite this issue as a local‑attack vulnerability with insecure tempfile handling, leading to potential expos...
CVE-2009-0035
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...
CVE-2009-0035
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...
Code injection
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...
CVE-2009-0035
CVE-2009-0035 affects alsa-utils 1.0.19 and later, enabling local users to overwrite arbitrary files through a symlink attack on /usr/bin/alsa-info and /usr/bin/alsa-info.sh. The vulnerability arises from improper handling of symlinks in these helper scripts, as documented across multiple sources...
CVE-2009-0035
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...
DEBIAN-CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2010-2449
Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...