CVE-2000-0151

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands...

CVE-2000-0151

CVE-2000-0151 : GNU make reads a Makefile from stdin and follows symlinks, enabling other local users to execute commands. This is a local impact issue with high complexity to exploit; CVSS data shows local access, complete confidentiality/integrity/availability impact. The provided documents do ...

CVE-2000-0151: Undefined Security Weakness

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands...

CVE-1999-0743

Technical details (affected software, versions, root cause, fixes) are not publicly available in the provided documents. Monitor for updates from the listed sources (Red Hat, NVD, CVE listings) for more precise guidance.

CVE-1999-0743: Undefined Security Weakness

Trn allows local users to overwrite other users' files via symlinks...

[SECURITY] New version of dump released.

The version of dump that was distributed with Debian GNU/Linux 2.1 suffers from a problem with restoring symbolic links. This has been fixed in version 0.4b9-0slink1. We recommend you upgrade your dump package immediately. This version "Uses lchown instead of chown, fixing a possible security...

CVE-1999-0402

CVE-1999-0402 affects wget 1.5.3, where the tool follows symlinks and changes permissions of the target file (not the symlink). The Red Hat, SUSE, and PT-Software entries corroborate the same description. The root cause is wget’s behavior when handling symlinks, leading to potential unintended pe...

CVE-1999-0324

The CVE-1999-0324 issue involves HP-UX's ppl program, where local users can create root-owned files via symlinks. Connected sources (Red Hat, EUVD, CVE listings) confirm HP-UX as the context and local-privilege impact through symlink manipulation. No patch version or remediation steps are provide...

CVE-1999-0371

CVE-1999-0371 impacts Lynx: a local user can overwrite sensitive files via /tmp symlinks. The issue is a local-auth, race/symlink-related flaw in Lynx’s handling of /tmp, with a low base score (CVSSv2 1.2) and partial confidentiality impact. No exploit details are provided in the connected docume...

CVE-1999-0371: Undefined Security Weakness

Lynx allows a local user to overwrite sensitive files through /tmp symlinks...

CVE-1999-0325: Undefined Security Weakness

vheumnt program in HP-UX allows local users to create root files through symlinks...

CVE-1999-0743

Trn allows local users to overwrite other users' files via symlinks...

PT-1999-1058 · Lynx · Lynx

Name of the Vulnerable Software and Affected Versions: Lynx affected versions not specified Description: The issue allows a local user to overwrite sensitive files through /tmp symlinks, potentially leading to security breaches. Recommendations: At the moment, there is no information about a newe...

PT-1999-1088 · Gnu · Wget

Name of the Vulnerable Software and Affected Versions: wget version 1.5.3 Description: The issue allows wget to follow symlinks and change permissions of the target file instead of the symlink itself. Recommendations: For version 1.5.3, consider updating to a newer version that does not follow...

Digital UNIX 4.0/4.0 B/4.0 D - SUID/SGID Core File

source: https://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions are 0600. This can be used to create root owned...

CVE-2024-31952

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via arbitrary file permission writes. The attacker must already have user privileges, and an administrator password must be entered during the...