Vulnerabilities (CVE)

Filtered by CWE-59
Total 1594 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1386 1 Texasimperialsoftware 1 Wftpd 2026-06-16 5.0 MEDIUM 7.5 HIGH
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.
CVE-2001-1378 1 Fetchmail 1 Fetchmail 2026-06-16 2.1 LOW N/A
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.
CVE-2001-1043 1 Argosoft 1 Ftp Server 2026-06-16 5.0 MEDIUM 7.5 HIGH
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
CVE-2001-1042 1 Transsoft 1 Broker Ftp Server 2026-06-16 5.0 MEDIUM 7.5 HIGH
Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
CVE-2001-0131 2 Apache, Debian 2 Http Server, Debian Linux 2026-06-16 3.3 LOW N/A
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
CVE-2000-1178 1 Joseph Allen 1 Joe 2026-06-16 2.1 LOW 5.5 MEDIUM
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.
CVE-2000-0972 1 Hp 1 Hp-ux 2026-06-16 2.1 LOW 5.5 MEDIUM
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
CVE-2000-0715 2 Conectiva, Kirk Bauer 2 Linux, Diskcheck 2026-06-16 2.1 LOW N/A
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file.
CVE-2000-0342 1 Qualcomm 1 Eudora 2026-06-16 5.0 MEDIUM 7.5 HIGH
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
CVE-1999-1593 1 Microsoft 3 Windows 2000, Windows 95, Windows 98 2026-06-16 7.6 HIGH N/A
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
CVE-1999-1386 1 Perl 1 Perl 2026-06-16 2.1 LOW 5.5 MEDIUM
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
CVE-1999-0981 1 Microsoft 1 Internet Explorer 2026-06-16 5.1 MEDIUM N/A
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
CVE-1999-0794 1 Microsoft 2 Excel, Office 2026-06-16 4.6 MEDIUM N/A
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
CVE-1999-0783 1 Freebsd 1 Freebsd 2026-06-16 5.0 MEDIUM 5.5 MEDIUM
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.