CVE-2015-7723

AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack...

Code injection

AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack...

CVE-2015-7724

CVE-2015-7724 affects the AMD fglrx-driver prior to 15.9, enabling local privilege escalation via a symlink attack. The issue is tied to an incomplete fix for CVE-2015-7723, as noted in multiple sources. The connected documents confirm the root cause (symlink-based privilege escalation) and the a...

CVE-2015-7723

AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack...

CVE-2015-7724

AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exists due to an incomplete fix for CVE-2015-7723...

CVE-2015-7723

CVE-2015-7723 concerns the AMD fglrx-driver, where local users can gain privileges via a symlink attack. Multiple sources describe the affected product as the AMD fglrx-driver and indicate the vulnerability exists before certain versions (initially noted as before 15.7; later advisories reference...

GLSA-201706-05 : D-Bus: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-05 D-Bus: Multiple vulnerabilities Multiple vulnerabilities have been discovered in D-Bus. Please review the original report referenced below for details. Impact : An attacker could possibly overwrite arbitrary files named...

D-Bus: Multiple vulnerabilities

Background D-Bus is a message bus system which processes can use to talk to each other. Description Multiple vulnerabilities have been discovered in D-Bus. Please review the original report referenced below for details. Impact An attacker could possibly overwrite arbitrary files named “once” with...

The vulnerability of the get_process_ttyname function in the system administration software Sudo may allow attackers to elevate their privileges to superuser status and execute arbitrary code.

The vulnerability of the getprocessttyname function in the Sudo system administration program is related to insufficient input data validation. The vulnerability is exploited by creating a symbolic link to the executable file of Sudo, with the file name formatted in a specific way a space followe...

Unspecified vulnerability in Perltidy

Perlpritic is a Perl source code analyzer; check-all-the-things is a code error checking software. perltidy is one of the set of software developer Steve Hancock developed by the Perl code organization tools. A security vulnerability exists in Perltidy 20160302 and earlier versions used in...

CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

Code injection

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

UBUNTU-CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

DEBIAN-CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

CVE-2016-10374

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

CVE-2016-10374

CVE-2016-10374 affects perltidy (via its handling of the current working directory for certain output files and lack of symlink-attack protection). Local users can overwrite arbitrary files by creating a symlink (example: perltidy.ERR). Connected advisories show vendor-level fixes: Mageia MGASA-2...

Predictable Filenames

netty-codec-http is vulnerable to predictable filenames for the temporary files. The vulnerability exists because it takes user provided file name as part of the temporary file name, allowing a malicious user to overwrite arbitrary files via a symlink attack...