8693 matches found
CVE-2001-0627
vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...
CVE-2001-0625
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...
CVE-2001-0556
The Nirvana Editor NEdit 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on 1 backup files or 2 temporary files used when nedit prints a file or portions of a file...
CVE-2001-0529
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack...
PT-2001-1735 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 2.9 and earlier Description: The issue allows a local attacker to delete any file named 'cookies' via a symlink attack when X forwarding is enabled. Recommendations: For OpenSSH versions 2.9 and earlier, consider disabling X...
CVE-2001-1301
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file...
CVE-2001-1119
cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp...
HPUX kmmodreg allows arbitrary file overwriting via symlink redirection of temporary file
Overview The kmmodreg program distributed with some HPUX versions creates two temporary files with predictable names. Due to insecure handling of these files, an intruder may use them to overwrite arbitrary files during system boot via a symbolic link attack. Description The kmmodreg program...
CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp...
CVE-2001-0556
The Nirvana Editor NEdit 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on 1 backup files or 2 temporary files used when nedit prints a file or portions of a file...
CVE-2001-0610
CVE-2001-0610 affects KDE’s KFM (KDE File Manager) when used with KDE 1.x. A local attacker can exploit a symlink attack in KFM’s per-user cache directory under /tmp, where the directory is created without proper ownership checks or existence verification. This insecure handling enables potential...
CVE-2001-0556
The CVE describes a local arbitrary-file overwrite vulnerability in Nirvana Editor (NEdit) 5.1.1 and earlier, caused by a symlink/insecure temporary file handling when printing (affecting backup and temp files).
Slackware /usr/bin/man vulnerability
The following advisory was sent to slackware July 11th, 2001, they failed to respond so I hope the temporary patch will make do: Submitted by : Josh [email protected], lockdown [email protected] zen-parse [email protected] Vulnerability : /usr/bin/man Tested On : Slackware 8.0 and before...
CVE-2001-1177
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
[ESA-20010711-01] AllCommerce insecure temporary files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------+ | EnGarde Secure Linux Security Advisory July 11, 2001 | | http://www.engardelinux.org/ ESA-20010711-01 | | | | Package: AllCommerce | | Summary: AllCommerce creates insecure...
CVE-2001-1146
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack...
Tripwire temporary files
------------------------------------------------------------ Insecure temporary files in Tripwire [email protected] $Date: 2001/07/09 05:02:02 $ ------------------------------------------------------------ Author: Jarno Huuskonen [email protected] Discovered: Tue 16 Jan 2001 Vendor...
Oracle Internet Directory LDAP Daemon does not check write permissions properly
Overview The Oracle LDAP Daemon oidldapd version 2.1.1.1, which ships with Oracle version 8i for Linux version 8.1.7, does not check write permissions properly. This can allow a local user to delete or write to any file on the system. Description The Oracle LDAP Daemon oidldapd version 2.1.1.1 do...