8691 matches found
CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...
CVE-1999-1026
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file...
Solaris 7.0 - aspppd Insecure Temporary File Creation
Solaris 7.0 - aspppd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these file...
Solaris 7.0 - aspppd Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these files an possibly elevate their privelages. This program i...
CVE-1999-1221
dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...
CVE-1999-0961
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...
CVE-1999-1187
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail...
Solaris 7.0 - Coredump File Write
Solaris 7.0 - Coredump File Write source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to...
Solaris 7.0 - 'Coredump' File Write
source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to the receipt of some signals. The...
CVE-1999-1388
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument...
PT-2004-3661 · Postgresql · Postgresql
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.4.5 and earlier Description: The issue concerns the make oidjoins check script in PostgreSQL, which allows local users to overwrite files via a symlink attack on temporary files. This can lead to a violation of protected...