CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- debian dpkg-cross** DISPUTED ** gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a...6.9 Medium
- manoj srivastava distdist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil####...6.9 Medium
- nostatic digitaldjfest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- guus sliepen dhis-serverdhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a...6.9 Medium
- convirture convirtconvirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp...6.9 Medium
- tivano cdrw-taperamlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink...6.9 Medium
- gleydson mazioli da silva cdcontrolwrittercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- iglues bulmages-serversbulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- audiolinkaudiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- arb project arb-commonarb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- aptoncdxmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- apertiumapertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#...6.9 Medium
- aegis, aegis aegis-web +1 moreaegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- openoffice openoffice.orgsenddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a...2.6 Low
- gert doering mgettyfaxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- amiga aviewasciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- crossfiremaps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary...3.3 Low
- opera browserUnspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of...9.3 High
- sentex jheadjhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files...4.6 Medium
- gentoo cman, fence +1 morefence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify...7.2 High
- gentoo cman, fence +1 moreThe (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly ...1.9 Low
- qemuqemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite...7.2 High
- jim trocki monalert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink...7.2 High
- sympasympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- gnu ibackupibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary...7.2 High
- freeradiusfreeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a...7.2 High
- debian fetaThe to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a...7.2 High
- debian xsabreA certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to...7.2 High
- jasper project jasperRace condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900...7.2 High
- redhat cmanThe pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...6.9 Medium
- redhat fedora, initscripts +1 morerc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local...4.7 Medium
- emacspeak inc emacspeakextract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a...6.6 Medium
- openswanThe IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local...4.4 Medium
- noomsOpen redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect...4.3 Medium
- python software foundation pythonTools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow...7.2 High
- joomlaJoomla! Open Redirect vulnerability5.8 Medium
- mysql, canonical ubuntu linux, debian linux +2 moreMySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...4.6 Medium
- stephenjungels plaitplaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack...4.4 Medium
- hp openvmsThe finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary...4.9 Medium
- r foundation rjavareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- debian citadel servermigrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a...6.9 Medium
- ampachegather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink...7.2 High
- debian honeyd commontest.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- tigergenmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink...7.2 High
- lxde lightweight x11 desktop environmentsrc/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users...4.6 Medium
- caudiumconfigvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack...7.2 High
- amarokThe MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in...3.3 Low
- phpmyadminphpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to...6.4 Medium
- twibright linksUnspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact...9.3 High
- clarolineOpen redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote...4.3 Medium
- Show moreLoading…