Vulnerabilities (CVE)

Filtered by CWE-59
Total 1391 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4975 1 Debian 1 Newsgate 2025-04-09 6.9 MEDIUM N/A
mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp##### temporary file.
CVE-2009-1253 1 James Stone 1 Tunapie 2025-04-09 4.4 MEDIUM N/A
James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file.
CVE-2008-1078 2 Gentoo, Rpath 2 Linux, Rpath Linux 2025-04-09 7.2 HIGH N/A
expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID] temporary file. NOTE: this is the same issue as CVE-2003-0308.1.
CVE-2008-3227 1 Joomla 1 Joomla 2025-04-09 7.5 HIGH N/A
Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.
CVE-2008-5366 1 Marco D\'itri 1 Ppp 2025-04-09 6.9 MEDIUM N/A
The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/probe-finished or (2) /tmp/ppp-errors temporary file.
CVE-2008-6398 1 Eric Raymond 1 Sng 2025-04-09 6.9 MEDIUM N/A
sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompiled$$.png, (2) /tmp/decompiled$$.sng, and (3) /tmp/canonicalized$$.sng temporary files.
CVE-2008-2266 2 Nzbget, Uudeview 2 Nzbget, Uudeview 2025-04-09 4.4 MEDIUM N/A
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.
CVE-2008-5140 1 Debian 1 Mailscanner 2025-04-09 6.9 MEDIUM N/A
trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file.
CVE-2008-4085 1 Stephenjungels 1 Plait 2025-04-09 4.4 MEDIUM N/A
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.
CVE-2008-4937 1 Openoffice 1 Openoffice.org 2025-04-09 2.6 LOW N/A
senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file.
CVE-2008-4958 1 Alejandro Garrido Mota 1 Gdrae 2025-04-09 6.9 MEDIUM N/A
gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file.
CVE-2006-5851 1 Openbase International Ltd 1 Openbase 2025-04-09 2.1 LOW N/A
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.
CVE-2008-4948 1 Nostatic 1 Digitaldj 2025-04-09 6.9 MEDIUM N/A
fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.
CVE-2008-4946 1 Convirture 1 Convirt 2025-04-09 6.9 MEDIUM N/A
convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file, related to the (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh, (3) Fedora_PV_Install/provision.sh, (4) CentOS_PV_Install/provision.sh, (5) common/provision.sh, (6) example/provision.sh, and (7) Windows_CD_Install/provision.sh scripts in image_store/.
CVE-2008-0167 2 Debian, Gforge 2 Debian Linux, Gforge 2025-04-09 4.6 MEDIUM N/A
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances.
CVE-2008-6552 2 Fedoraproject, Redhat 5 Fedora, Cluster Project, Cman and 2 more 2025-04-09 6.9 MEDIUM N/A
Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
CVE-2008-1417 1 Axyl 1 Axyl 2025-04-09 6.9 MEDIUM N/A
The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file.
CVE-2008-4952 1 Emacs 1 Emacs-jabber 2025-04-09 6.9 MEDIUM N/A
emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.log temporary file.
CVE-2009-4193 1 Merkaartor 1 Merkaartor 2025-04-09 3.3 LOW N/A
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file.
CVE-2007-5695 1 Sitebar 1 Sitebar 2025-04-09 6.4 MEDIUM N/A
Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in the forward parameter in a Log In action.