CVE-2001-0736

This CVE (CVE-2001-0736) affects the Pine email client (and pico editor) prior to version 4.33, where a local user can overwrite arbitrary files via a symlink attack. The vulnerability allows any local user to overwrite files owned by other users, including root, under certain conditions. A fix i...

CVE-2001-0744

Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file...

CVE-2001-0736

Vulnerability in 1 pine before 4.33 and 2 the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0782

KDE ktvision 0.1.1-271 and earlier is affected by a local privilege escalation through a symlink attack on a user configuration file. The underlying cause is a symbolic-link/race condition that allows a local attacker to gain root privileges. The provided documents identify the affected product a...

CVE-2001-0685

Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file...

CVE-2001-0474

Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-2001-0078

CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...

CVE-2001-0095

catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the smanPID temporary file...

CVE-2000-0799

CVE-2000-0799 affects SGI IRIX InPerson (versions 5.3–6.5.10). Local users can escalate privileges via a symlink attack on the .ilmpAAA temporary file, potentially achieving root access. There are no SGI patches listed; SGI advises removing InPerson and replacing it with SGImeeting, with the work...

CVE-2001-0409

The CVE-2001-0409 vulnerability affects vim (aka gvim). It allows a local attacker to modify files being edited by other users via a symlink attack on swap/backup files when the victim edits a file in a world-writable directory. The underlying issue is a symlink race during edit sessions, enablin...

CVE-2001-0095

Catman in Solaris 2.7/2.8 creates insecure temporary files with predictable names in world-writable /tmp, enabling local users to perform a symlink attack to overwrite arbitrary files. The root cause is predictable temp-file naming and symlink handling when run as root. Impact is local privilege ...

CVE-2000-0799

inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file...

CVE-2001-0409

vim aka gvim allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory...

CVE-2001-0474

The CVE affects Mesa’s Utah-glx on Mandrake Linux 7.2. A temporary file race in Utah-glx enables a symlink attack on /tmp/glxmemory, allowing local users to overwrite arbitrary files during the next X server start. The Mandrake advisory MDKSA-2001:029 notes the issue and lists updated Mesa packag...

CVE-1999-1168

CVE-1999-1168 affects the install.iss script of Internet Security Scanner (ISS) for Linux v5.3, via a symlink race in a temporary file that lets a local user change arbitrary file permissions. Root cause: a symlink attack on a temporary file used during installation. Impact: local privilege/permi...

CVE-1999-1227

CVE-1999-1227 concerns Ethereal and a local symlink-attack that allows overwriting arbitrary files via the packet capture file. Documentation consistently states the flaw is a local-privilege issue due to a symlink race, enabling complete confidentiality, integrity, and availability impact for af...

CVE-1999-1038

Tiger 2.2.3 is affected by a local privilege issue where an attacker can overwrite arbitrary files via a symlink attack on temporary files in Tiger’s default working directory (WORKDIR). The root cause is a symlink vulnerability in how temporary files are handled, enabling local users to achieve ...

CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...

CVE-1999-1541

The CVE-1999-1541 entry concerns Cactus Software Shell Lock. It describes that local users can read or modify decoded shell files before execution due to a symlink attack on a temporary file. The vulnerability details indicate a local attack vector with low attack complexity and no authentication...