Vulnerabilities (CVE)

Filtered by CWE-59
Total 1445 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4579 1 Gentoo 2 Cman, Fence 2026-04-23 1.9 LOW N/A
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.
CVE-2008-4980 1 Zak B Elep 1 Rccp 2026-04-23 6.9 MEDIUM N/A
delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccp_tmp.txt temporary file.
CVE-2008-3928 1 Debian 1 Honeyd Common 2026-04-23 6.9 MEDIUM N/A
test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVE-2008-4985 1 Cadsoft 1 Vdr 2026-04-23 6.9 MEDIUM N/A
vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file.
CVE-2008-4192 1 Redhat 1 Cman 2026-04-23 6.9 MEDIUM N/A
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
CVE-2008-4941 1 Arb Project 1 Arb-common 2026-04-23 6.9 MEDIUM N/A
arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts.
CVE-2008-4944 1 Gleydson Mazioli Da Silva 1 Cdcontrol 2026-04-23 6.9 MEDIUM N/A
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder*-out temporary files.
CVE-2008-1569 2 Debian, Policyd-weight 2 Debian Linux, Policyd-weight 2026-04-23 3.3 LOW N/A
policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket.
CVE-2008-5380 1 Gpsdrive 1 Gpsdrive 2026-04-23 6.9 MEDIUM N/A
gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959.
CVE-2009-0032 2 Apple, Mandriva 4 Cups, Corporate Server, Linux and 1 more 2026-04-23 6.9 MEDIUM N/A
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.
CVE-2008-3930 1 Debian 1 Citadel Server 2026-04-23 6.9 MEDIUM N/A
migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVE-2008-5154 1 Koeniglich 1 P3nfs 2026-04-23 6.9 MEDIUM N/A
bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file.
CVE-1999-1593 1 Microsoft 3 Windows 2000, Windows 95, Windows 98 2026-04-23 7.6 HIGH N/A
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
CVE-2008-4191 1 Emacspeak Inc 1 Emacspeak 2026-04-23 6.6 MEDIUM N/A
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
CVE-2008-5371 1 Marc Gloor 1 Screenie 2026-04-23 6.9 MEDIUM N/A
screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file.
CVE-2008-5704 1 Gpsdrive 1 Gpsdrive 2026-04-23 7.6 HIGH N/A
src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380.
CVE-2008-4477 1 Jim Trocki 1 Mon 2026-04-23 7.2 HIGH N/A
alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file.
CVE-2007-5940 1 Tug 1 Texlive 2007 2026-04-23 4.6 MEDIUM N/A
feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.
CVE-2008-3456 1 Phpmyadmin 1 Phpmyadmin 2026-04-23 6.4 MEDIUM N/A
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
CVE-2008-5746 1 Sun 2 Snmp Management Agent, Solaris 2026-04-23 6.9 MEDIUM N/A
Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files.