CVE-2004-0457

CVE-2004-0457: The mysqlhotcopy script in MySQL

CVE-2004-0457

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0193

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...

CVE-2004-0233

Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...

CVE-2003-0193

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...

DEBIAN-CVE-2003-0193

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...

CVE-2004-0545

LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0655

eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file...

CVE-2004-0647

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file...

CVE-2004-0647

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file...

CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...

DEBIAN-CVE-2004-0647

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file...

Mandrake Linux Security Advisory : gzip (MDKSA-2003:068)

A vulnerability exists in znew, a script included with gzip, that would create temporary files without taking precautions to avoid a symlink attack. Patches have been applied to make use of mktemp to generate unique filenames, and properly make use of noclobber in the script. Likewise, a fix for...

Mandrake Linux Security Advisory : tripwire (MDKSA-2001:064)

Jarno Juuskonen reported that a temporary file vulnerability exists in versions of Tripwire prior to 2.3.1-2. Because Tripwire opens/creates temporary files in /tmp without the OEXCL flag during filesystem scanning and database updating, a malicious user could execute a symlink attack against the...

Apple Mac OSX - Panther Internet Connect Privilege Escalation

Apple Mac OSX - Panther Internet Connect Privilege Escalation Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System: OSX Panther Possibly Previous Versions. Application: Internet Connect.app Tested: Panther 10.3.4 Internet Connect v1.3 Problem: Internet Connect allow...

Mac OS X Panther Internet Connect Local Root Exploit

Exploit for macOS platform in category local exploits ==================================================== Mac OS X Panther Internet Connect Local Root Exploit ==================================================== Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System:...

Apple Mac OSX - Panther Internet Connect Privilege Escalation

Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System: OSX Panther Possibly Previous Versions. Application: Internet Connect.app Tested: Panther 10.3.4 Internet Connect v1.3 Problem: Internet Connect allows any file on the file system to be altered. Status: 0day! -...

CVE-2004-0698

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack...

applePanther.txt

Apple OSX Panther Internet Connect - Local root Vulnerability. ============================================================== Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System: OSX Panther Possibly Previous Versions. Application: Internet Connect.app Tested:...

CVE-2004-0698

4D WebSTAR (FTP/Server) is affected: versions up to 5.3.2 and earlier contain a local symbolic link vulnerability caused by opening files without properly verifying their existence or absolute location. This design issue can let a local attacker write to arbitrary files with the application’s per...