CVE-1999-0333

CVE-1999-0333 affects HP OpenView OmniBack II. The issue enables remote root execution via spoofing and local root via a symlink attack. Affected product/versions are not exhaustively specified in the provided documents, but Red Hat/NVD entries concur on the vulnerability description. Remediation...

CVE-1999-0860

Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...

CVE-1999-0857

CVE-1999-0857 affects the FreeBSD gdc program, where local users can modify files via a symlink attack. The vulnerability stems from a symlink-related flaw allowing local privilege impact (integrity partially). The NVD entry lists a LOW 2.1 base score with local attack vector and no explicit expl...

CVE-2000-0067

CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...

CVE-1999-0411

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access...

CVE-1999-0434

The CVE-1999-0434 entry documents a vulnerability in the XFree86 xfs command where a symlink attack enables local users to create files in restricted directories, potentially leading to privilege escalation or a denial of service. Connected sources corroborate the issue as a symlink-based file cr...

CVE-1999-0857

FreeBSD gdc program allows local users to modify files via a symlink attack...

CVE-1999-0114

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack...

CVE-2000-0067

The CVE refers to CyberCash Merchant Connection Kit (MCK). Affected component: MCK. Vulnerability: local users can modify files via a symlink attack (symlink race condition) as described in CVE-2000-0067. The PT-2000-1059 entry confirms the issue is related to local access and notes that affected...

CVE-1999-0333

HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack...

CVE-1999-0480

Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack...

CVE-1999-0480

Midnight Commander 4.x is affected by a local denial of service via a symlink attack. The connected PT-1999-1160 entry confirms the issue in Midnight Commander 4.x and attributes it to a symlink-based condition exploitable by a local attacker to trigger DoS. No remediation or patched versions are...

CVE-2000-0005

HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...

CVE-1999-0434

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

CVE-1999-0860

Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack...

CVE-2000-0005

HP-UX aserver program allows local users to gain privileges via a symlink attack...

[SECURITY] New version of apcd released

Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...

CVE-2000-0107

Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...

autobuse-angel.txt

Hi, This weekend I decided to play around with a couple of network management tools on securityfocus.com; Angel http://www.paganini.net/angel/, and Autobuse http://www.picante.com/gtaylor/download/. Unfortunately, upon review of the source, I noticed a bad trend. Both tools handle temporary files...

[SECURITY] New version of apcd released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 1, 2000 - ------------------------------------------------------------------------ Package: apcd Vulnerability type:...