CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- bryce harrington xdiagnosewelcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via...3.3 Low
- opencryptoki project opencryptokiopenCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary...6.2 Medium
- frii proc\ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is...2.6 Low
- monkey-project monkeyMonkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink...6.9 Medium
- ingumadev bokkenBokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary...2.6 Low
- munin-monitoring muninThe qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a...1.2 Low
- google tunnelblickThe errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users...1.2 Low
- redhat enterprise linux, todd miller sudo +1 moreA certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users...5.6 Medium
- x.org x serverThe LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to...1.2 Low
- ioquake3 engineioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the...5.6 Medium
- hp linux imaging and printing projectThe send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing ...1.2 Low
- gajimsrc/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink...3.3 Low
- bdale garbee as31as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file...3.6 Low
- golismeroGoLismero symlink attack3.3 Low
- robert ancell lightdmLightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink...1.9 Low
- ibm invscout.rteThe (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before...4.0 Medium
- python virtualenvVirtualenv Allows Symlink Attack on /tmp/1.2 Low
- conkyThe getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to...6.3 Medium
- qnx neutrino rtosThe runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the...3.3 Low
- puppetPuppet allows local users to modify the permissions of arbitrary files6.3 Medium
- puppetPuppet arbitrary file overwrite6.3 Medium
- geoff wong hammerheadhammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink...3.3 Low
- fusefuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows...3.3 Low
- fabfile fabricFabric vulnerable to symlink attack on tmp files4.4 Medium
- gnu groffThe (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*...3.3 Low
- gnu groffThe (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl...3.3 Low
- gnu groffThe (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib...3.3 Low
- gnu groffThe (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU...3.3 Low
- gnu groff, apple mac os x +1 morecontrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite...3.3 Low
- freedesktop dbusThe configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite...3.3 Low
- maynard johnson oprofileThe do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local...6.3 Medium
- ihji pmake, netbsd +1 moreThe make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow...3.3 Low
- redhat spice-xpiThe SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local...3.3 Low
- opensuse/etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and...6.3 Medium
- gnome gdmGNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of...6.9 Medium
- phpThe Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete...6.3 Medium
- apple mac os x, freebsd +1 morecrontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the...1.9 Low
- php pearThe installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a...3.3 Low
- php pearThe installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink...3.3 Low
- ruby-lang rubyThe FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330...6.3 Medium
- feh project fehThe feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to...3.3 Low
- feh project fehThe feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to...3.3 Low
- phpThe SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4...4.4 Medium
- eximThe open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1)...6.9 Medium
- libfuse project libfuseFUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary...5.8 Medium
- jwilk ocrodjvuocrodjvu is vulnerable to Arbitrary File Modification via symlink attack6.2 Medium
- gnu gnashThe configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink...3.3 Low
- troglobit pimdpimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary...3.3 Low
- debian dpkgdpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify...6.8 Medium
- openfabrics libsdpThe default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp,...3.3 Low
- Show moreLoading…