Vulnerabilities (CVE)

Filtered by CWE-59
Total 1391 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3791 1 Lxde 1 Lightweight X11 Desktop Environment 2025-04-09 4.6 MEDIUM N/A
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file.
CVE-2008-5378 1 Lehrstuhl Fur Mikrobiologie 1 Arb 2025-04-09 6.9 MEDIUM N/A
arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids_*_* temporary file.
CVE-2008-5136 1 Ldrolez 1 Tkusr 2025-04-09 6.9 MEDIUM N/A
tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file.
CVE-2008-3456 1 Phpmyadmin 1 Phpmyadmin 2025-04-09 6.4 MEDIUM N/A
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
CVE-2008-5154 1 Koeniglich 1 P3nfs 2025-04-09 6.9 MEDIUM N/A
bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file.
CVE-2008-5034 1 A Mennucc1 1 Printfilters-ppd 2025-04-09 6.9 MEDIUM N/A
master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'
CVE-2008-3946 1 Hp 1 Openvms 2025-04-09 4.9 MEDIUM N/A
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.
CVE-2008-5142 1 Freebsd 1 Freebsd-sendpr 2025-04-09 6.9 MEDIUM N/A
sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr.##### temporary file.
CVE-2007-5207 1 Debian 1 Guilt 2025-04-09 3.3 LOW N/A
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.
CVE-2008-7247 2 Mysql, Oracle 2 Mysql, Mysql 2025-04-09 6.0 MEDIUM N/A
sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
CVE-2007-5839 1 Bitchx 1 Bitchx 2025-04-09 4.6 MEDIUM N/A
The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.
CVE-2008-4284 1 Ibm 1 Websphere Application Server 2025-04-09 5.8 MEDIUM N/A
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature.
CVE-2008-3927 1 Tiger 1 Tiger 2025-04-09 7.2 HIGH N/A
genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files.
CVE-2008-4956 1 Firewallbuilder 1 Fwbuilder 2025-04-09 6.9 MEDIUM N/A
fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file.
CVE-2008-1694 1 Gnu 2 Emacs, Sccs 2025-04-09 4.6 MEDIUM N/A
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVE-2008-3929 1 Ampache 1 Ampache 2025-04-09 7.2 HIGH N/A
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.
CVE-2009-3304 1 Gforge 1 Gforge 2025-04-09 3.3 LOW N/A
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php.
CVE-2008-0666 1 Website Meta Language 1 Website Meta Language 2025-04-09 3.6 LOW N/A
Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c.
CVE-2008-5374 1 Matthias Klose 1 Bash-doc 2025-04-09 6.9 MEDIUM N/A
bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.
CVE-2008-0613 1 Xoops 1 Xoops 2025-04-09 5.0 MEDIUM N/A
Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the xoops_redirect parameter.