8694 matches found
CVE-2004-0388
The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...
security flaw
Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...
wgetuhoh.txt
Tested software: Wget 1.9, Wget 1.9.1 Wget checks for the presence of a file with the same name of the one invoqued at the command line, if the file exists, then it saves the downloaded file with a different name. The problem is that Wget does not lock the file, and directly writes to it. So...
CVE-2004-0422
CVE-2004-0422 concerns the flim Emacs library, where temporary files are created insecurely (before 1.14.3), allowing a local user to overwrite arbitrary files via a symlink attack. Public advisories document that this could enable local privilege impact, with a CVSS v2 base score of 2.1 (LOW). R...
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
CVE-2004-0233
CVE-2004-0233 describes a symlink vulnerability in the utempter library, where device names containing .. (dot dot) directory traversal can enable local users to overwrite arbitrary files via a symlink attack when an application trusts utmp/wtmp. Public documents from Slackware, Gentoo, Gentoo GL...
CVE-2004-0233
Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file...
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file...
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0423
CVE-2004-0423 affects ssmtp 2.50.6 and earlier. The log_event function allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file, enabling local privilege impact as described. The Connected documents provide the same description across multiple sourc...
CVE-2004-0404
CVE-2004-0404 affects the logcheck utility. A local attacker can exploit a symlink attack in a temporary directory under /var/tmp to overwrite arbitrary files. The issue is present in logcheck before version 1.1.1. The vulnerability is documented across multiple sources (NVD/NVD-derived entries, ...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0388
The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0388
CVE-2004-0388 affects the MySQL server via the mysqld_multi script, allowing a local user to overwrite arbitrary files through a symlink attack. The root cause is insecure handling of temporary/target paths, enabling a symlink-based overwrite. The documented impact is local access with partial in...
CVE-2004-0107
The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...