Vulnerabilities (CVE)

Filtered by CWE-59
Total 1354 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3699 1 Amarok 1 Amarok 2025-04-09 3.3 LOW N/A
The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.
CVE-2008-5366 1 Marco D\'itri 1 Ppp 2025-04-09 6.9 MEDIUM N/A
The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.
CVE-2008-5373 1 Bacula 1 Bacula 2025-04-09 6.9 MEDIUM N/A
mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### temporary file, probably a related issue to CVE-2005-2995.
CVE-2007-5718 2 Debian, Vobcopy 2 Debian Linux, Vobcopy 2025-04-09 4.9 MEDIUM N/A
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
CVE-2008-5375 1 Cmus 1 Cmus 2025-04-09 6.9 MEDIUM N/A
cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file.
CVE-2008-4984 1 Freedesktop 1 Scratchbox2 2025-04-09 6.9 MEDIUM N/A
scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c) /tmp/sb2-pkg-chk.$tstamp.##### temporary files, related to the (1) dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts.
CVE-2008-5136 1 Ldrolez 1 Tkusr 2025-04-09 6.9 MEDIUM N/A
tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file.
CVE-2008-5370 1 Pvpgn 1 Pvpgn 2025-04-09 6.9 MEDIUM N/A
pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.
CVE-2008-4993 1 Xen 1 Xen 2025-04-09 6.9 MEDIUM N/A
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.
CVE-2007-6061 1 Audacityteam 1 Audacity 2025-04-09 5.0 MEDIUM N/A
Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.
CVE-2008-4476 1 Sympa 1 Sympa 2025-04-09 6.9 MEDIUM N/A
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability.
CVE-2008-4936 1 Gert Doering 1 Mgetty 2025-04-09 6.9 MEDIUM N/A
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
CVE-2008-5742 1 Netcat 1 Netcat 2025-04-09 4.0 MEDIUM N/A
Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the redirect parameter in a logoff action to modules/auth/index.php or (2) the url parameter to modules/linkmanager/redirect.php. NOTE: this was reported within an "HTTP Response Splitting" section in the original disclosure.
CVE-2008-5369 1 No-ip 1 No-ip2 2025-04-09 6.9 MEDIUM N/A
noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.
CVE-2007-5839 1 Bitchx 1 Bitchx 2025-04-09 4.6 MEDIUM N/A
The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.
CVE-2008-5152 1 Peter S Galbraith 1 Mh-book 2025-04-09 6.9 MEDIUM N/A
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.
CVE-2007-3921 1 Gforge 1 Gforge 2025-04-09 3.3 LOW N/A
gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.
CVE-2008-3931 1 R Foundation 1 R 2025-04-09 6.9 MEDIUM N/A
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2008-4973 1 Debian 1 Myspell 2025-04-09 6.9 MEDIUM N/A
i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/i2my#####.1 and (2) /tmp/i2my#####.2 temporary files.
CVE-2008-5156 1 Dann Frazier 1 Systemimager-server 2025-04-09 6.9 MEDIUM N/A
si_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.inetd.conf or (2) /tmp/pxe.conf.*.tmp temporary file.