Vulnerabilities (CVE)

Filtered by CWE-59
Total 1266 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4639 1 Sentex 1 Jhead 2025-04-09 4.6 MEDIUM N/A
jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVE-2008-4964 1 Krzysztof Kozlowski 1 Konwert 2025-04-09 6.9 MEDIUM N/A
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.
CVE-2008-4937 1 Openoffice 1 Openoffice.org 2025-04-09 2.6 LOW N/A
senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file.
CVE-2008-4973 1 Debian 1 Myspell 2025-04-09 6.9 MEDIUM N/A
i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/i2my#####.1 and (2) /tmp/i2my#####.2 temporary files.
CVE-2008-5378 1 Lehrstuhl Fur Mikrobiologie 1 Arb 2025-04-09 6.9 MEDIUM N/A
arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids_*_* temporary file.
CVE-2007-6692 1 Menalto 1 Gallery 2025-04-09 6.4 MEDIUM N/A
Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) Core and (2) print modules.
CVE-2008-5145 1 Debian 1 Ltp 2025-04-09 6.9 MEDIUM N/A
ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file.
CVE-2008-3946 1 Hp 1 Openvms 2025-04-09 4.9 MEDIUM N/A
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.
CVE-2008-3261 1 Claroline 1 Claroline 2025-04-09 4.3 MEDIUM N/A
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
CVE-2008-5157 1 Uoregon 1 Tau 2025-04-09 6.9 MEDIUM N/A
tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/makefile.tau.*.##### or (2) /tmp/makefile.tau*.##### temporary file, related to the (a) tau_cxx, (b) tau_f90, and (c) tau_cc scripts.
CVE-2008-5312 1 Mailscanner 1 Mailscanner 2025-04-09 6.9 MEDIUM N/A
mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) panda-autoupdate.new, (4) trend-autoupdate.new, and (5) rav-autoupdate.new scripts in /etc/MailScanner/autoupdate/, a different vulnerability than CVE-2008-5140.
CVE-2009-3304 1 Gforge 1 Gforge 2025-04-09 3.3 LOW N/A
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php.
CVE-2008-6762 1 Wordpress 1 Wordpress 2025-04-09 4.3 MEDIUM N/A
Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter.
CVE-2008-3927 1 Tiger 1 Tiger 2025-04-09 7.2 HIGH N/A
genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files.
CVE-2008-4970 1 Lustre 1 Lustre-tests 2025-04-09 6.9 MEDIUM N/A
runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.
CVE-2008-5368 1 Lukas Ruf 1 Muttprint 2025-04-09 6.9 MEDIUM N/A
muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file.
CVE-2008-5369 1 No-ip 1 No-ip2 2025-04-09 6.9 MEDIUM N/A
noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.
CVE-2008-4948 1 Nostatic 1 Digitaldj 2025-04-09 6.9 MEDIUM N/A
fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.
CVE-2008-4191 1 Emacspeak Inc 1 Emacspeak 2025-04-09 6.6 MEDIUM N/A
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
CVE-2008-5256 1 Virtualox 1 Virtualox 2025-04-09 4.4 MEDIUM N/A
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file.