8958 matches found
Command injection
The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...
CVE-2007-5839
The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...
CVE-2007-5839
The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...
CVE-2007-5839
CVE-2007-5839 affects BitchX 1.1a: the e_hostname function in commands.c allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command. Root cause described as insecure temporary-file creation (tmpnam). Impact stated: lo...
Design/Logic Flaw
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...
CVE-2007-5805
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...
CVE-2007-5805
CVE-2007-5805 affects IBM AIX 5.2 and 5.3; the cfgcon component in swcons misvalidates the -p argument, allowing local users in the system group to create or overwrite an arbitrary file and make it world-writable via a symlink-name attack. This issue is tied to an incomplete fix for CVE-2007-5804...
CVE-2007-5805
cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...
CVE-2002-2382
cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out...
CVE-2002-2382
The CVE-2002-2382 issue affects CVSup 1.2: a vulnerability in cvsupd.sh that allows a local attacker to overwrite arbitrary files and gain privileges through a symlink attack on /var/tmp/cvsupd.out. Root cause is a symlink-based path manipulation enabling file overwrite and privilege escalation. ...
DEBIAN-CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
Arbitrary file deletion
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
CVE-2007-5718
CVE-2007-5718 affects vobcopy up to version 0.5.14. A local attacker can exploit insecure temporary file handling (creating/appending to /tmp/vobcopy.bla or /tmp/vobcopy_0.5.14.log) via a symlink attack to write to arbitrary files with the privileges of the running user. The vulnerability arises ...
CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
CVE-2007-5718
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...
CVE-2007-3919
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...