Latest CVE Feed
-
1.2
LOWCVE-2006-4676
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file.... Read more
Affected Products : rendezvous- Published: Sep. 11, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-1331
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.... Read more
- Published: May. 03, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2002-1563
stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.... Read more
Affected Products : stunnel- Published: May. 12, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0095
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.... Read more
Affected Products : sunos- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0118
rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.... Read more
Affected Products : eldav- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-1276
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.... Read more
Affected Products : ispell- Published: Jun. 21, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0142
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0887
xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.... Read more
- Published: Jan. 15, 2002
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2002-1674
procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to.... Read more
Affected Products : freebsd- Published: Dec. 31, 2002
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2005-4660
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted... Read more
Affected Products : ipcop- Published: Dec. 31, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2004-0880
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-6306
Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.... Read more
Affected Products : client- Published: Dec. 05, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2005-1396
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file.... Read more
Affected Products : ce_ceterm- Published: May. 03, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2000-1045
nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.... Read more
Affected Products : nss_ldap- Published: Dec. 11, 2000
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2000-0154
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.... Read more
Affected Products : unixware- Published: Feb. 16, 2000
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2004-1069
Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.... Read more
- Published: Jan. 10, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2005-2475
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.... Read more
- Published: Aug. 05, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2005-1878
GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file.... Read more
Affected Products : giptables_firewall- Published: Jun. 09, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2005-2527
Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.... Read more
Affected Products : java- Published: Dec. 31, 2005
- Modified: Apr. 03, 2025