CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- apple safariWebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly...4.3 Medium
- redhat linux, fedoraproject fedora core, redhat enterprise linux +1 more +3 moreThe init.d script for the X.Org X11 xfs font server on various Linux distributions might allow...6.2 Medium
- eggblogSession fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web...6.8 Medium
- ibm db2Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users...4.4 Medium
- openbase international ltd openbaseopenexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink...2.1 Low
- ibm aixrm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite...3.3 Low
- antiwordThe (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and...1.9 Low
- apple mac os x, mac os x server +1 morepasswd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows...6.8 Medium
- sun javaRace condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to...1.2 Low
- gnu gnump3dGNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink...1.9 Low
- gnu texinfoThe sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite...1.2 Low
- ekg project ekg, debian linux +1 morelinki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files...5.5 Medium
- lutel lutelwallLutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack...5.5 Medium
- everybuddyeverybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack...5.5 Medium
- gnu cpio, canonical ubuntu linux, debian linux +2 moreRace condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary...4.7 Medium
- mathopdThe internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is...5.5 Medium
- mozilla firefox, mozilla +1 moreFirefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite...6.5 Medium
- oracle mysql, debian linux, mariadb +2 moreThe mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and...4.6 Medium
- wmfrogwmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite...1.2 Low
- gentoo portage, linux +1 morePortage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack...5.5 Medium
- aladdin enterprises ghostscriptThe (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs...7.2 High
- cpanelcPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files...5.5 Medium
- kde, debian linux +1 moreKDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations,...7.1 High
- symantec antivirus scan engineThe LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red...7.0 High
- fujitsu siemens networkernsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via...7.2 High
- netscape navigator, mozilla firefox +1 moreNetscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a...5.0 Medium
- pedestalsoftware integrity protection driverPedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers,...9.8 Critical
- schroepl mod gzipmod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode...7.1 High
- ibm u2 universecci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root,...7.8 High
- mgetty project mgettyfaxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink...5.5 Medium
- cvsupcvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a...7.2 High
- sun patchproUnspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors...10.0 High
- sun solaris pc netlinkSun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and...7.5 High
- microsoft windows 2000, windows nt +1 moreNTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage...5.5 Medium
- freebsd point-to-point protocol daemonBSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on...6.9 Medium
- blackberry qnx neutrino real-time operating systemHard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow...5.5 Medium
- kernel util-linux, avaya cvlan, integrated management suit +4 more +6 morescript command in the util-linux package before 2.11n allows local users to overwrite arbitrary...5.5 Medium
- fetchmailfetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via...2.1 Low
- transsoft broker ftp serverTranssoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by...7.5 High
- texasimperialsoftware wftpdWFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends...7.5 High
- argosoft ftp serverArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by...7.5 High
- apache http server, debian linux +1 morehtpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite...3.3 Low
- joseph allen joeJoe text editor follows symbolic links when creating a rescue copy called DEADJOE during an...5.5 Medium
- hp hp-uxHP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a...5.5 Medium
- conectiva linux, kirk bauer diskcheck +1 moreDiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite...2.1 Low
- qualcomm eudoraEudora 4.x allows remote attackers to bypass the user warning for executable attachments such as ...7.5 High
- perlPerl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows...5.5 Medium
- microsoft internet explorerInternet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client...5.1 Medium
- microsoft excelMicrosoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.4.6 Medium
- freebsdFreeBSD allows local users to conduct a denial of service by creating a hard link from a device...5.5 Medium