CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with...9.9 Critical
- red hat, inc. rpmIt was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when...7.8 High
- [unknown] rpmIt was found that rpm did not properly handle RPM installations when a destination path was a...7.3 High
- rkkda foo2zjsfoo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian...5.5 Medium
- ibm spectrum protect, tivoli storage manager +1 moreIBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM...5.5 Medium
- cisco unified communications managerA vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an...6.1 Medium
- openstack instack-undercloudinstack-undercloud vulnerable to symlink attack on tmp files6.4 Medium
- devscripts devel team devscripts, fedoraproject fedora +1 moreArgument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to...7.5 High
- tug texlivemktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to...6.1 Medium
- php-fpmphp-fpm allows local users to write to or create arbitrary files via a symlink attack.5.5 Medium
- tug texlivemktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write...6.1 Medium
- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial missing symlink check7.5 High
- redhat automatic bug reporting toolAutomatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have...7.8 High
- cron project cron, debian linux +1 moreIn the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the...6.7 Medium
- pulpproject pulpThe pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or...7.1 High
- cisofy lynisUnspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly...7.8 High
- redhat ansibleAnsible Sandbox Escape via Symlink Attack7.8 High
- iptables-parse project moduleThe IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files...5.5 Medium
- amd fglrx-driverAMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE:...7.8 High
- amd fglrx-driverAMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack.7.8 High
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...7.8 High
- perltidy project perltidyperltidy through 20160302, as used by perlcritic, check-all-the-things, and other software,...5.5 Medium
- proftpdProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user...5.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10...5.5 Medium
- samba, debian linux, redhat enterprise linux +2 moreSamba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a...7.5 High
- apple watchos, iphone os, mac os x +2 moreAn issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10...5.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10...5.5 Medium
- nodejs node.jsSymlink Arbitrary File Overwrite in tar7.5 High
- netbsdmail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to...7.8 High
- qemu, debian linux +1 moreQemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A...7.6 High
- debian postgresql-commonThe pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in...7.8 High
- nagiosbase/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the...7.8 High
- mariadb, oracle mysql, percona server +1 more +3 moremysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6...7.8 High
- teradata studio expressThe installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates...7.8 High
- f5 nginx, fedoraproject fedora +1 moreThe nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6...7.8 High
- redhat ansible, fedoraproject fedora +1 moreLink Following in ansible7.8 High
- tardiff project tardiff, debian linux +1 moreCool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a...3.3 Low
- openstack troveOpenstack DBaaS (Trove) Improper Link Resolution Before File Access5.5 Medium
- zarafa collaboration platform, fedoraproject fedora +1 morezarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain...8.4 High
- gummi project gummi, opensuse leap, opensuse +2 moreGummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary...3.3 Low
- sos project sos, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreSoSReport Predictable Tmp File Names7.8 High
- red hat automatic bug reporting tool, oracle linux, redhat enterprise linux +4 more +6 moreThe abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...7.8 High
- redhat automatic bug reporting tool, enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool ...3.6 Low
- dracut project dracutmodules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2...3.6 Low
- linuxcontainers lxc, canonical ubuntu linux +1 morelxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...7.2 High
- apport project apport, canonical ubuntu linux +1 morekernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk...7.2 High
- openvz vzctlvzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root...3.6 Low
- apple iphone osBackup in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem...5.0 Medium
- apple iphone osLocation Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions...4.6 Medium
- Show moreLoading…