8708 matches found
CVE-2005-2693
cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack...
CVE-2005-1842
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack...
CVE-2005-1842
Adobe Version Cue VCNative (VCNative) on Mac OS X (Version Cue 1.0/1.0.1; Creative Suite 1.0/1.3) uses a setuid root VCNative that writes log files with predictable names (e.g., VCNative-[pid].log) in the working directory. This enables a local attacker to perform a symlink attack that can overwr...
CVE-2005-1842
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack...
USN-172-1: lm-sensors vulnerability
Javier Fernández-Sanguino Peña noticed that the pwmconfig script created temporary files in an insecure manner. This could allow a symlink attack to create or overwrite arbitrary files with full root privileges since pwmconfig is usually executed by root...
CVE-2005-2672
The CVE-2005-2672 issue affects lm_sensors’ pwmconfig, which creates temporary files with predictable names and can be exploited via a symlink attack to overwrite arbitrary files. Multiple advisories document the vulnerability in lm_sensors across major distros (e.g., Debian lm-sensors DSA-814-1,...
CVE-2005-2672
pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...
DEBIAN-CVE-2005-2672
pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...
USN-171-1: PHP4 vulnerabilities
CAN-2005-1751: The php4-dev package ships a copy of the "shtool" utility in /usr/lib/php4/build/, which provides useful functionality for developers of software packages. Eric Romang discovered that shtool created temporary files in an insecure manner. This could allow a symlink attack to create ...
CVE-2004-2462
CVE-2004-2462 affects cplay 1.49 on Linux. The vulnerability is a local symlink attack against the cplay_control temporary file, allowing local users to overwrite arbitrary files. No exploitation details or fixes are provided in the connected documents; remediation information is not available he...
CVE-2004-2473
wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-2473
Technical details for CVE-2004-2473 are not publicly available in the provided documents; the entries summarize a local symlink-related overwrite vulnerability without product/version specifics beyond wmFrog 0.1.6 prior to 0.2.0.
CVE-2004-2462
Removed by vendor...
CVE-2004-2462
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplaycontrol temporary file...
CVE-2004-2319
IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 is affected. Two issues are described: (1) local users can create or overwrite files via the /001 log file to onedcu, and (2) local users can read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Root cause details are not ...
CVE-2004-2319
IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...
CVE-2005-2582
Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 has world-writable permissions on the log and license directories, enabling local users to delete log files, perform a symlink attack to kavmonitor.log (append to arbitrary files), or delete license keys and disrupt keepup2date. The connected...
Kaspersky Antivirus for Unix / Linux weak default file permissions
Weak folder permissions allow to overwrite any system file with symlink attack...
USN-165-1: heartbeat vulnerability
Eric Romang discovered that heartbeat created temporary files in an insecure manner. This could allow a symlink attack to create or overwrite arbitrary files with root privileges as soon as heartbeat is started...
