CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- blenderThe undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to...3.3 Low
- llvm clang, opensuse +1 moreThe GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users...1.9 Low
- freedesktop popplerThe openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on...3.3 Low
- node packaged modules project packaged modulesLocal Privilege Escalation in npm3.3 Low
- jonathan leung show in browserScript Injection in Show In Browser gem3.3 Low
- systemd project systemd, opensuse +1 moreThe session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd,...6.3 Medium
- canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134...1.9 Low
- kbd-project kbd, opensuse +1 moreThe init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary...6.3 Medium
- redhat libvirt, fedoraproject fedora +1 moreThe LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete...5.8 Medium
- python pillow, pythonware python imaging library +1 morePIL and Pillow Vulnerable to Symlink Attack on Tmpfiles4.4 Medium
- gnu a2psThe tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user...2.1 Low
- apple iphone os, tvos +1 moreCrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local...6.3 Medium
- robert ancell lightdm, canonical ubuntu linux +1 moredmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary...1.9 Low
- logilab logilab-common, opensuse +1 moreImproper Link Resolution Before File Access in logilab-commons4.4 Medium
- numpy, fedoraproject fedora, redhat enterprise linux +2 moreNumpy arbitrary file write via symlink attack5.5 Medium
- iproute2 project iproute2iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a...3.3 Low
- cspan capture-tinyThe Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via...3.6 Low
- gnu cpio, opensuse +1 morecpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote...5.0 Medium
- debian axiomaxiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a...3.3 Low
- debian syncevolutionsyncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe...3.3 Low
- debian localepurge(1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to...3.3 Low
- python pyxdgpyxdg Arbitrary File Overwrite via Race Condition3.3 Low
- cmu fliteThe play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify...3.3 Low
- apple cups, canonical ubuntu linux +1 morelppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...1.2 Low
- puppet enterprise, puppetlabs puppet, canonical ubuntu linux +1 more +3 morePuppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3...2.1 Low
- hp linux imaging and printing projectbase/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to...2.1 Low
- openfabrics ibutils, redhat enterprise linux +1 moreOpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on...6.3 Medium
- augeasThe transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite...3.3 Low
- nagios, redhat openstack +1 morerss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1,...6.3 Medium
- redhat openstacknagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5...6.3 Medium
- oracle openjdkThe unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle...4.4 Medium
- systemd project systemdsystemd, when updating file permissions, allows local users to change the permissions and SELinux...3.3 Low
- redhat storage serverRed Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the ...3.6 Low
- debian txt2manA certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows...3.3 Low
- gnome display managerGNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary...6.9 Medium
- phusion passengerinsecure temporary directory usage in passenger4.4 Medium
- libimobiledeviceuserpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local...3.3 Low
- pypa pip, fedoraproject fedora +1 moreImproper Link Resolution Before File Access in pip2.1 Low
- jeff ortel suds, opensuse, redhat enterprise linux +2 moreImproper Link Resolution Before File Access in Suds1.2 Low
- redhat enterprise linux, jboss enterprise web server +1 moreThe (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...6.9 Medium
- bestpractical rtbin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to...3.3 Low
- google chrome osGoogle Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation...7.5 High
- oracle support toolsasr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to...6.9 Medium
- apache commons fileuploadIncorrect Default Permissions in Apache Commons FileUpload3.3 Low
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePackstack: packstack: arbitrary file overwrite via symlink attack8.8 High
- hp linux imaging and printing project, redhat enterprise linux +1 moreHP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary...1.9 Low
- fusionforge(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, ...6.9 Medium
- google android debug bridgeandroid-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files...3.3 Low
- centrify deployment manager, suite +1 moreCentrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows...3.3 Low
- ibm advanced settings utility, bootable media creator +1 moreIBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator...3.3 Low
- Show moreLoading…