8693 matches found
CVE-1999-1026
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file...
CVE-1999-1036
CVE-1999-1036 affects COPS 1.04. A local user can exploit a symlink attack on temporary files in res_diff, ca.src, and mail.chk to overwrite or create arbitrary files. The underlying issue is insecure handling of temporary files that allows a local attacker to gain unauthorized file writes. The a...
CVE-1999-1168
install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...
CVE-1999-1439
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files...
CVE-1999-1286
The CVE-1999-1286 vulnerability affects SGI IRIX 6.2 and earlier with the addnetpr component. It allows local users to modify arbitrary files and potentially gain root access through a symlink attack on a temporary file. The description and sources provided corroborate a local-privilege-elevation...
CVE-1999-1439
CVE-1999-1439 : The vulnerability is in gcc 2.7.2, where local users can overwrite arbitrary files via a symlink attack on temporary files ending in .i, .s, or .o. The provided documents describe the affected component and the underlying cause (symlink/temporary file race) and identify the impact...
CVE-1999-1269
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file...
CVE-1999-1091
Vulnerability: UNIX news readers tin and rtin create the file "/tmp/.tin_log" with insecure permissions and follow symlinks. Root cause: insecure file permissions combined with symlink handling allows a local attacker to modify permissions of files writable by the user via a symlink attack. Affec...
CVE-1999-1227
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file...
CVE-1999-1187
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail...
CVE-1999-1036
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in 1 resdiff, 2 ca.src, and 3 mail.chk...
CVE-1999-1221
dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...
CVE-2001-1092
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mhprofile file...
CVE-2001-1102
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...
rlmadmin v3.8M view file symlink vulnerability
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Ministry-Of-Peace - Security Advisory 01 - 07th Sept 2001 rlmadmin v3.8M view file symlink vulnerability -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Overview: --------- rlmadmin is a user management...
CVE-2001-1000
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file...
CVE-2001-1378
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files...
CVE-2001-1041
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace .trc file that is created in an alternate home directory identified by the ORACLEHOME environment variable...