8698 matches found
CVE-2003-1155
X-CD-Roast 0.98 alpha10 through alpha14 is vulnerable to a local symlink attack that allows a local user to overwrite arbitrary files. Affected: X-CD-Roast 0.98 alpha10–alpha14. Root cause: symlink manipulation enabling file overwrite. Impact: as described, enables partial impact to confidentiali...
CVE-2003-1156
Java Runtime Environment JRE and Software Development Kit SDK 1.4.2 through 1.4.202 allows local users to overwrite arbitrary files via a symlink attack on 1 unpack.log, as created by the unpack program, or 2 .mailcap1 and .mime.types1, as created by the RPM program...
CVE-2004-1894
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log...
CVE-2004-1808
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-1808
The CVE-2004-1808 issue concerns Extcompose in metamail, where the tool does not verify the output file before writing, permitting a local user to overwrite arbitrary files via a symlink attack. Affected component: Extcompose/m metamail (exact version not specified in provided documents). Root ca...
CVE-2003-1139
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...
CVE-2003-1139
Musicqueue 1.2.0 is affected. The vulnerability allows a local user to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file, enabling potentially unauthorized modification of files. Root cause: a crash-generated file name (...
CVE-2003-1156
CVE-2003-1156 concerns Java Runtime Environment (JRE) and SDK 1.4.2 through 1.4.2_02. A local attacker can cause arbitrary file overwrite via a symbolic link race on (1) unpack.log (created by the unpack program) or (2) .mailcap1 and .mime.types1 (created by the RPM package). The vulnerability is...
CVE-2004-2014
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded...
CVE-2004-1894
The CVE-2004-1894 issue concerns TEXutil in ConTEXt. When TEXutil is run with the --silent option, a local user can cause a symlink attack on texutil.log to overwrite arbitrary files. Affected component: TEXutil/ConTEXt. Root cause: symlink handling during silent mode leading to unauthorized file...
CVE-2004-1895
CVE-2004-1895 affects YaST Online Update (YOU) in SuSE 8.2 and 9.0. The vulnerability enables local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies, indicating a local, user-privilege escalation risk (no remote access). The available sources explicitly describe the is...
CVE-2004-2014
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded...
CVE-2005-1396
Race condition in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ceeditlog temporary file...
CVE-2005-0824
The internaldump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal...
CVE-2005-0365
The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2005-0894
OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on 1 temporary files in the openmosixcollector directory or 2 nodes.tmp...
CVE-2005-0894
OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on 1 temporary files in the openmosixcollector directory or 2 nodes.tmp...
CVE-2005-0990
unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...