CVE-2002-1199

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments...

CVE-2001-1066

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2003-0120

adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...

CVE-2004-0160

CVE-2004-0160 affects the synaesthesia package. The vulnerability allows a local unprivileged user to cause configuration-file creation/modification with root ownership via a symlink attack on the config file, enabling potential code execution with root privileges. Debian and OpenVAS advisories d...

CVE-2003-0120

The CVE-2003-0120 issue affects adb2mhc in the mhc-utils package prior to version 0.25+20010625-7.1. The root cause is a symlink attack in a default temporary directory with a predictable name, allowing local users to overwrite arbitrary files they can write to. This is a local-privilege affectin...

CVE-2002-0662

CVE-2002-0662 affects ScrollKeeper 0.3 to 0.3.11. The vulnerability is due to insecure temporary file creation in /tmp by the scrollkeeper-get-cl program, enabling a local attacker to create or overwrite files via a symlink-like attack on scrollkeeper-tempfile.x. Debian advisories note the issue ...

CVE-1999-1486

sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2002-1514

gdslockmgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "iscinit1.X" temporary file, as demonstrated by modifying the xinetdbd file...

CVE-2002-0662

scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files...

CVE-2004-0256

GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...

CVE-2003-0120

adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...

CVE-2004-0160

Removed by vendor...

CVE-2002-1517

The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...

CVE-2002-1193

CVE-2002-1193 affects tkmail prior to 4.0beta9-8.1, where local users can create or overwrite files as other users via a symlink attack on temporary files. The concrete impact is local privilege-related file manipulation. The cited sources confirm the vulnerability exists in tkmail’s handling of ...

CVE-2002-1550

dumpsmutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2002-1193

tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files...

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

CVE-2002-1199

The CVE-2002-1199 issue affects the ypxfrd daemon used for NIS map distribution. The getdbm procedure constructs a path to /var/yp/domain/map without proper validation, allowing directory traversal via the domain and map arguments and enabling a symlink-based override that can expose files outsid...

CVE-2004-0256

GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...

GLSA-200405-05 : Utempter symlink vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-05 Utempter symlink vulnerability Utempter contains a vulnerability that may allow local users to overwrite arbitrary files via a symlink attack. Impact : This vulnerability may allow arbitrary files to be overwritten with...