8693 matches found
CVE-2002-0174
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file...
CVE-2002-0248
wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file...
CVE-2002-0157
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file...
CVE-2002-0210
setlicense for TOLIS Group Backup and Restore Utility BRU 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file...
CVE-2002-0213
xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory...
CVE-2002-0248
wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file...
CVE-2002-0334
CVE-2002-0334 affects xtell/xtelld; vulnerable are xtell 1.91.1 and earlier, and 2.x before 2.7. The issue is a local symlink attack on the temporary .xtell-log file that allows local users to modify files. OpenVAS/Nessus entries confirm Debian/DSA advisories; remediation involves upgrading to fi...
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 also called ARCservIT allows local users to overwrite arbitrary files via a symlink attack on the temporary files 1 asagent.tmp or 2 inetd.tmp...
CVE-2002-0296
The CVE-2002-0296 issue affects Tarantella Enterprise 3, where local users can overwrite arbitrary files through a symlink attack on the spinning temporary file. Root cause: improper handling of temporary files enabling a symlink-based overwrite. Impact: local/x local user access with partial int...
CVE-2001-1346
ARCserveIT 6.61 and 6.63 (ARCservIT) are affected by a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack on temporary files (asagent.tmp or inetd.tmp). The underlying issue is insecure handling of temporary files leading to local privilege impact with partia...
CVE-2002-0210
setlicense for TOLIS Group Backup and Restore Utility BRU 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file...
CVE-2002-0271
Runtime library in GNU Ada compiler GNAT 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files...
CVE-2002-0334
xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file...
CVE-2002-0248
CVE-2002-0248 affects wmtv versions 0.6.5 and earlier. Local users can modify arbitrary files via a symlink attack on the configuration file due to improper handling of symlinks. Impact is local, complete confidentiality/integrity/availability as described; remediation recommended is upgrading to...
CVE-2002-0271
CVE-2002-0271 affects the GNU Ada compiler (GNAT) versions 3.12p through 3.14p. The issue arises from a symlink attack on temporary files, allowing local users to modify files belonging to other users. The resulting impact is limited to integrity (partial) and requires local access; no remote or ...
CVE-2002-0210
CVE-2002-0210 affects the TOLIS Group Backup and Restore Utility (BRU) version 17.0. The vulnerability arises from a symlink attack on the temporary file /tmp/brutest.$$, allowing local users to overwrite arbitrary files. According to the NVD entry, the impact is complete for confidentiality, int...
CVE-2001-1256
CVE-2001-1256 concerns HP-UX 11.11, 11.04 and 11.00 where the kmmodreg program creates two temporary files in /tmp (namely /tmp/.kmmodreg_lock and /tmp/kmpath.tmp) with insecure handling. A local attacker can exploit a symlink race to overwrite arbitrary world-writeable files because the files ar...
CVE-2001-1256
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the 1 /tmp/.kmmodreglock and 2 /tmp/kmpath.tmp temporary files...
CVE-2002-0165
CVE-2002-0165 concerns LogWatch 2.5, where local users could gain root privileges via a symlink attack in the logwatch temporary directory. The initial description provides the vulnerability scope but does not specify affected patch versions, mitigations, or other details. No connected documents ...