8698 matches found
CVE-2004-0880
Removed by vendor...
CVE-2004-0881
Removed by vendor...
CVE-2004-1689
sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...
DEBIAN-CVE-2004-1689
sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...
CVE-2004-1689
sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...
CVE-2004-0690
CVE-2004-0690 : The DCOPServer in KDE 3.2.3 and earlier is vulnerable to a local symlink attack in the /tmp directory that allows an attacker to gain unauthorized access. The issue is rooted in symlink handling rather than remote code execution; local access with low privilege is implied. Public ...
CVE-2004-0690
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory...
Fedora Core 2 : kdebase-3.2.2-6.FC2 (2004-293)
Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks. The Common Vulnerabilities...
CVE-2004-0851
The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0851
The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2004-0851
The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0115
VirtualPCServices in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServicesLog temporary file...
CVE-2002-1514
The CVE-2002-1514 entry concerns gds_lock_mgr in Borland InterBase . The vulnerability allows local users to overwrite files and gain privileges via a symlink attack on a temporary file named isc_init1.X , demonstrated by modifications to the xinetdbd file. The provided records indicate a local a...
CVE-2004-0115
The CVE-2004-0115 issue affects Microsoft Virtual PC for Mac 6.0–6.1. The setuid VirtualPC_Services creates a temporary log file (/tmp/VPCServices_Log) without proper checks, enabling a local attacker with valid logon to create a symlink that leads to truncation/overwriting of arbitrary files and...
CVE-2004-0108
The CVE-2004-0108 entry concerns the isag utility (used for processing sysstat data) and describes a local privilege issue where a symlink attack on temporary files allows local users to overwrite arbitrary files. The vulnerability arises from insecure temporary file handling rather than remote e...
CVE-2002-1550
CVE-2002-1550 affects IBM AIX via dump_smutil.sh, where local users can overwrite arbitrary files through a symlink attack on temporary files. The vulnerability is caused by improper handling of temporary file names in the script, enabling a local-privilège-claiming overwrite. Documented impact i...
CVE-2002-1516
The CVE-2002-1516 entry concerns rpcbind on SGI IRIX. When running rpcbind with the -w command line switch, a symlink-attack vulnerability could allow a local user to overwrite arbitrary files. Root cause: improper handling of symlinks by rpcbind under -w. Impact: local user could modify files, p...
CVE-2004-0256
CVE-2004-0256 affects GNU libtool and concerns versions prior to 1.5.2. During compilation, libtool directories created under /tmp can be tricked by a symlink, allowing a local user to overwrite arbitrary files. The documented impact is a local, user-level vulnerability with no remote access requ...