CVE-1999-1095

sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort...

Solaris 2.5.1 lp and lpsched Symlink Vulnerabilities

Exploit for solaris platform in category local exploits ==================================================== Solaris 2.5.1 lp and lpsched Symlink Vulnerabilities ==================================================== !/bin/sh lpNet & temp file exploit: break lp, then use lp priv to break root or bi...

Solaris 7.0 - aspppd Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these files an possibly elevate their privelages. This program i...

PT-2004-3661 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.4.5 and earlier Description: The issue concerns the make oidjoins check script in PostgreSQL, which allows local users to overwrite files via a symlink attack on temporary files. This can lead to a violation of protected...