8708 matches found
Design/Logic Flaw
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
DEBIAN-CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
CVE-2006-0050
CVE-2006-0050 : Debian’s snmptrapfmt vulnerability allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. It arises from not preventing overwriting when writing temp files. Public docs corroborate a Debian advisory (DSA-1013-1) with a fixed version cited for...
CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
CVE-2006-1279
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
Design/Logic Flaw
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
CVE-2006-1279
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
CVE-2006-1279
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
DEBIAN-CVE-2006-1279
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
CVE-2006-1279
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
CVE-2006-1279
CVE-2006-1279 affects CGI::Session 4.03-1. The vulnerability allows local users to overwrite arbitrary files by exploiting a symlink attack on temporary files used by the drivers File, db_file, and possibly sqlite. The issue is a local-privilege/file-write vulnerability rather than a remote-execu...
CVE-2006-1279
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by 1 Driver::File, 2 Driver::dbfile, and possibly 3 Driver::sqlite...
security flaw
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...
Arbitrary file deletion
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
CVE-2006-1231
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
CVE-2006-1231
CVE-2006-1231 affects CAPI4HylaFAX 1.3 when compiled with GENERATE_DEBUGSFFDATAFILE. The vulnerability arises from a symlink attack on the temporary file c2faxrecv_dbgdatafile.sff, enabling local users to modify arbitrary files. The description clearly states local access and a file-override outc...
CVE-2006-1231
Removed by vendor...