CVE-2000-0694

pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack...

CVE-2000-0890

periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0140

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2000-0694

CVE-2000-0694 concerns the pgxconfig component of the Raptor GFX configuration tool. The vulnerability arises from a symlink attack that enables local users to gain privileges. The available documents identify the affected software as the Raptor GFX configuration tool’s pgxconfig and describe a l...

CVE-2001-0059

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0036

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...

CVE-2000-0890

CVE-2000-0890 is a race-condition vulnerability affecting the FreeBSD periodic script (and possibly other systems) that allows a local user to overwrite arbitrary files via symlink manipulation of temporary files named like /tmp/periodic.*_$PID. The issue arises because periodic creates predictab...

CVE-2001-0140

arpwatch 2.1a4 is vulnerable to a local symlink attack that can allow a local user to overwrite arbitrary files in certain configurations. The connected Mandrake advisory MDKSA-2001:002 notes a temporary file race condition and indicates the fix is included in arpwatch version 2.1a10. Affected pr...

CVE-2001-0069

dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0138

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0116

The CVE concerns gpm 1.19.3 where a race condition allows a local user to exploit predictable /tmp filenames and symlink targets to overwrite/modify files the privileged gpm process uses. This is described in CERT/CC and Mandrake advisories, which note a temporary-file handling flaw; the impact i...

CVE-2001-0143

The CVE-2001-0143 issue affects the vpop3d component in the linuxconf package (versions 1.23r and earlier). The root cause is a temporary file race (symlink attack) that local users can exploit to overwrite arbitrary files. Public references in the Mandrake advisory MDKSA-2001:011 confirm the vul...

CVE-2001-0117

CVE-2001-0117 concerns diffutils’ sdiff 2.7, where sdiff creates temporary files insecurely, enabling a local user to overwrite files via a symlink attack. The issue affects diffutils in affected distributions (e.g., Red Hat advisories note a temporary-file handling vulnerability in sdiff). Explo...

CVE-2001-0143

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0109

CVE-2001-0109 affects SuSE 7.0 and earlier, where the component rctab can be manipulated by a local user through a symlink attack on the temporary file rctmp , allowing creation or overwriting of arbitrary files. The vulnerability is due to insecure handling of temporary files leading to local pr...

CVE-2001-0125

CVE-2001-0125 affects exmh 2.2 and earlier, where insecure handling of temporary files in /tmp (e.g., exmhErrorMsg) allows local users to overwrite files via a symlink attack. Connected advisories confirm the issue and note that newer versions (e.g., exmh 2.3.1+) fix the vulnerability by switchin...

CVE-2001-0116

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0120

CVE-2001-0120 relates to the shadow-utils package, specifically the useradd component. The vulnerability arises from insecure temporary file handling: useradd creates temporary files in /etc/default with predictable names. If /etc/default is world-writable, an attacker could perform a symbolic-li...

CVE-2001-0120

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0138

CVE-2001-0138 affects wu-ftpd; the privatepw helper allows a local user to overwrite arbitrary files via a symlink attack in wu-ftpd before version 2.6.1-6. The issue stems from a temporary file handling weakness. Mitigation: upgrade wu-ftpd to 2.6.1-6 or newer (as reflected in Debian/Mandrake ad...