8693 matches found
CVE-1999-1037
rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file...
CVE-1999-1386
The vulnerability CVE-1999-1386 affects Perl versions 5.004_04 and earlier. When Perl is run with the -e option, it follows symbolic links, allowing a local attacker to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX path. The connected PT-1999-1699 entry reiterates that t...
CVE-2000-0027
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...
CVE-1999-1037
CVE-1999-1037 affects SATAN 1.1.1; a local symlink attack allows a non-privileged user to overwrite arbitrary files via /tmp/rex.$$. This is described in the vulnerability record as rex.satan permits local file overwrite through a symlink race. The connected records confirm the affected product a...
CVE-2001-0627
vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...
CVE-2001-0529
Technical details for CVE-2001-0529 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2001-0625
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...
CVE-2000-1190
imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file...
CVE-1999-1328
CVE-1999-1328 affects linuxconf prior to 1.11.r11-rh3 on Red Hat Linux 5.1. The issue arises from a symlink attack that lets local attackers overwrite arbitrary files and escalate to root privileges. The connected documents confirm the vulnerable component (linuxconf), the affected version range,...
CVE-2000-0027
IBM Network Station Manager NetStation is affected by CVE-2000-0027: local users can gain privileges via a symlink attack. The flaw involves improper handling of symbolic links that enables privilege escalation on affected systems. The provided documents describe the vulnerability but do not spec...
CVE-2001-0627
The CVE cites SCO OpenServer’s vi (5.0.0–5.0.6) as vulnerable: it creates insecure, world-writable temporary files in /tmp with predictable names, allowing a local attacker to exploit a symlink to overwrite arbitrary files writable by the user. The impact is file integrity loss for targeted files...
CVE-2001-0529
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack...
CVE-1999-1386
Perl 5.00404 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file...
CVE-2001-0823
The CVE-2001-0823 entry documents a local privilege escalation in the Performance Co-Pilot (PCP) package via the pmpost utility, prior to version 2.2.1-3. An attacker can exploit a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR) to gain root/privilege access. The underly...
CVE-2001-0823
The pmpost program in Performance Co-Pilot PCP before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory PCPLOGDIR...
CVE-1999-1332
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file...
CVE-1999-1433
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file...
CVE-1999-1565
CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...
