CVE-1999-0961

HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...

CVE-1999-0961

HPUX sysdiag contains a local privilege escalation where an unprivileged user can gain root via a symlink attack during log file creation. The Root Cause is a symlink handling vulnerability in the log file creation path. Affected software is HP-UX sysdiag (no specific version ranges provided in t...

CVE-1999-0676

CVE-1999-0676 affects Solaris 2.6, where the sdtcm_convert component allows a local user to overwrite sensitive files via a symlink attack. The vulnerability arises from a symlink handling weakness in sdtcm_convert, enabling a local attacker to target files the process should not write to. The co...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-1999-0786

The CVE-1999-0786 entry concerns the Solaris dynamic linker. Vulnerability: a local user can create arbitrary files via the LD_PROFILE environmental variable and a symlink attack affecting the dynamic linker. Affected component: Solaris dynamic linker; root cause: LD_PROFILE manipulation enabling...

CVE-2000-0031

The CVE-2000-0031 issue affects the initscripts package in Red Hat Linux and is caused by a symlink attack that allows local users to gain privileges. Connected sources (NVD, PT-2000-1038) confirm local privilege escalation via a symlink-related flaw in initscripts; no explicit fix/version detail...

CVE-2000-0029

Technical details about CVE-2000-0029 are not publicly provided in the supplied documents; only the basic description is available. Monitor for updates.

CVE-1999-0893

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack...

CVE-1999-0786

The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...

CVE-2000-0031

The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack...

CVE-2000-0029

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack...

CVE-1999-0893

CVE-1999-0893 relates to SCO OpenServer and involves the userOsa component. The connected PT-1999-1441 entry describes a local vulnerability where an attacker can exploit a symlink race to corrupt files via userOsa. It notes that affected SCO OpenServer versions are not specified and provides no ...

CVE-2000-0154

The CVE-2000-0154 entry concerns the ARCserve agent in UnixWare, where a local attacker can modify arbitrary files via a symlink attack. The available connected records confirm Tcl/UnixWare context and the vulnerability’s local access vector with a high attack complexity and low base score (NVD m...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

[SECURITY] New version of make released

Package: make Vulnerability type: symlink attack Debian-specific: no The make package as shipped in Debian GNU/Linux 2.1 is vulnerable to a race condition that can be exploited with a symlink attack. make used mktemp while creating temporary files in /tmp. and that is a known potential security...

[SECURITY] New version of make released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 20, 2000 - ------------------------------------------------------------------------ Package: make Vulnerability type:...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-1999-0988

The CVE-1999-0988 entry describes a local-file read vulnerability in UnixWare pkgtrans where a symlink attack allows a local user to read arbitrary files. Affected component: UnixWare pkgtrans (local-exploit path). Root cause: symlink race enabling leakage of file contents. Impact: Confidentialit...

CVE-1999-0114

CVE-1999-0114 (Elm 2.4 mail package) : The Elm mail package (elm-2.4) is affected via the filter command, where a symlink attack lets local users execute commands as other users and read other users’ files. Root cause is a directory/file permission/symlink handling flaw in the filter command. Imp...