CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- debian mailscannertrend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local...6.9 Medium
- javier fernandez jailerupdatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- bkleineidam libpam mountpasswdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- tkmantkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) ...6.9 Medium
- ldrolez tkusrtkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the ...6.9 Medium
- debian os-prober** DISPUTED ** os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a...6.2 Medium
- rpath initscriptsrc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete...6.9 Medium
- a mennucc1 printfilters-ppd** DISPUTED ** master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary...6.9 Medium
- lazaruscreate_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete...6.9 Medium
- twiki** DISPUTED ** postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a...6.9 Medium
- pilot-qof datafreedom-perl** DISPUTED ** dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary...6.9 Medium
- debian initramfs-tools** DISPUTED ** init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via...6.9 Medium
- jose m.vidal bk2siteredirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- ti kan xmcdThe (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary...6.9 Medium
- xenqemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- lars bahner xcalpscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp...6.9 Medium
- xastirxastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp...6.9 Medium
- georges khaznadar wimswims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env###...6.9 Medium
- cadsoft vdrvdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite...6.9 Medium
- freedesktop scratchbox2scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a)...6.9 Medium
- scilab scilab-binscilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp...6.9 Medium
- john horne rkhunterrkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- remi vanicat realtimebattleperl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- zak b elep rccpdelqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- shrubbery rancidgetipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- radianceradiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on (a)...6.9 Medium
- postfix** DISPUTED ** postfix_groups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary...6.9 Medium
- alan woodland ogle, ogle-mmx +1 moreogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- debian newsgatemkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- netmrgrrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on (1...6.9 Medium
- debian myspelli2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on ...6.9 Medium
- steve robbins mgtmailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp...6.9 Medium
- align.bmr.kyushu-u.ac mafftmafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- lustre lustre-testsruniozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- alastair mckinstry ltp-network-testltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- bitmover lmbenchThe (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary...6.9 Medium
- linuxtradelinuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) ...6.9 Medium
- openswan linux-patch-openswanlinux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack...6.9 Medium
- savonet liguidsoapliguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a...6.9 Medium
- krzysztof kozlowski konwertfilters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack...6.9 Medium
- dov grobgeld impose\+impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1)...6.9 Medium
- gpsdrive gpsdrive-scriptsgeo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a...6.9 Medium
- alejandro garrido mota gdraegdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the ...6.9 Medium
- gccxmlfind_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via...6.9 Medium
- firewallbuilder fwbuilderfwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- duncan webb freevofreevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack...6.2 Medium
- fumitoshi ukai fmlmead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the ...6.9 Medium
- firehol** DISPUTED ** firehol in firehol 1.256 allows local users to overwrite arbitrary files via a...6.9 Medium
- emacs emacs-jabberemacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink...6.9 Medium
- gplhost dtc-commondtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp...6.9 Medium
- Show moreLoading…