PT-1999-1308 · Debian · Man-Db

Name of the Vulnerable Software and Affected Versions: man-db affected versions not specified Description: The issue allows local users to overwrite files via a symlink attack using the zsoelim program in the Debian man-db package. Recommendations: At the moment, there is no information about a...

CVE-1999-0803

The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack...

CVE-1999-1244

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file...

CVE-1999-0480

Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack...

PT-1999-1160 · Unknown +2 · Midnight Commander +1

Name of the Vulnerable Software and Affected Versions: Midnight Commander versions 4.x Description: The issue allows local attackers to conduct a denial of service with a symlink attack. Recommendations: For Midnight Commander versions 4.x, at the moment, there is no information about a newer...

CVE-1999-0434

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

CVE-1999-0433

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

PT-1999-1116 · Xfree86 · Xfree86

Name of the Vulnerable Software and Affected Versions: XFree86 affected versions not specified Description: The XFree86 startx command is susceptible to a symlink attack, enabling local users to create files in restricted directories. This could potentially allow them to gain privileges or cause ...

CVE-1999-0411

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access...

PT-1999-1096 · Sco · Sco Openserver Enterprise System

Name of the Vulnerable Software and Affected Versions: SCO OpenServer Enterprise System version 5.0.4p Description: The issue concerns several startup scripts in the system, including S84rpcinit, S95nis, S85tcp, and S89nfs, which are susceptible to a symlink attack. This allows a local user to...

CVE-2000-0371

The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...

CVE-1999-1168

install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...

CVE-1999-1495

xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file...

IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you will find the passwd file with...

CVE-1999-0374

Debian GNU/Linux cfengine package is susceptible to a symlink attack...

[SECURITY] New versions of cfengine fixes symlink attack

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...

[SECURITY] New versions of cfengine fixes symlink attack

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...

PT-1999-1061 · Debian · Cfengine

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux affected versions not specified Description: The issue affects the cfengine package in Debian GNU/Linux, making it susceptible to a symlink attack. Recommendations: At the moment, there is no information about a newer version...

CVE-2000-0005

HP-UX aserver program allows local users to gain privileges via a symlink attack...

CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...