8841 matches found
CVE-1999-0114
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack...
PT-1998-1028 · Elm · Elm
Name of the Vulnerable Software and Affected Versions: elm-2.4 mail package Description: The issue allows local users to execute commands as other users and read other users' files through the filter command in the Elm mail package. This is achieved by using a symlink attack. Recommendations: For...
CVE-1999-1210
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...
CVE-1999-1139
Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...
PT-1997-1191 · Hewlett Packard · Hp-Ux
Name of the Vulnerable Software and Affected Versions: HP-UX versions 11.0 and earlier Description: The issue allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file. Recommendations: For HP-UX versions 11.0 and earlier, at the momen...
CVE-1999-0957
MajorCool mjkeycache program allows local users to modify files via a symlink attack...
PT-1997-1171 · Majorcool · Majorcool Mj Key Cache
Name of the Vulnerable Software and Affected Versions: MajorCool mj key cache affected versions not specified Description: The issue allows local users to modify files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-1999-1410
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file...
CVE-1999-1286
addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file...
CVE-1999-1398
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack...
CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...
CVE-1999-1026
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file...
Solaris 7.0 - aspppd Insecure Temporary File Creation
Solaris 7.0 - aspppd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these file...
Solaris 7.0 - aspppd Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these files an possibly elevate their privelages. This program i...
CVE-1999-1221
dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...
CVE-1999-0961
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...
CVE-1999-1187
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail...
Solaris 7.0 - Coredump File Write
Solaris 7.0 - Coredump File Write source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to...
Solaris 7.0 - 'Coredump' File Write
source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to the receipt of some signals. The...