Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,084 results · page 21 of 22
Mar 12, 2001arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0140 · Other software · Immunix · reported by MITRELow 1.2
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- Product
- Immunix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infolinux-mandrake.com
Mar 12, 2001mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0141 · Other software · Gert Doering · reported by MITRELow 1.2
mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- Product
- Mgetty
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infocalderasystems.com
Mar 12, 2001squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0142 · Other software · Immunix · reported by MITRELow 1.2
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- Product
- Immunix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.commarc.info
Mar 12, 2001vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0143 · Other software · Immunix · reported by MITRELow 1.2
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Immunix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infolinux-mandrake.com
Mar 12, 2001gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0116 · Other software · Immunix · reported by MITRELow 1.2
gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Immunix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infolinux-mandrake.com
Mar 12, 2001sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.CVE-2001-0117 · Other software · Immunix · reported by MITRELow 1.2
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
- Product
- Immunix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddownload.immunix.orgmarc.info
Mar 12, 2001exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.CVE-2001-0125 · Other software · Exmh · reported by MITRELow 1.2
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
- Product
- Exmh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.commarc.info
Feb 16, 2001KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.CVE-2001-0036 · Other software · KTH · reported by MITRELow 1.2
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.
- Product
- KTH Kerberos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Feb 16, 2001periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.CVE-2000-0890 · Other software · Freebsd · reported by MITRELow 1.2
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 12, 2001Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file.CVE-2001-0079 · Other software · HP · reported by MITRELow 2.1
Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file.
- Product
- Support Tools Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Feb 12, 2001dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0069 · Other software · Debian · reported by MITRELow 2.1
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Feb 12, 2001patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0059 · Other software · SUN · reported by MITREMedium 6.2
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Feb 12, 2001catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.CVE-2001-0095 · Other software · SUN · reported by MITRELow 1.2
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Feb 12, 2001in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS.CVE-2001-0078 · Other software · SUN · reported by MITRELow 2.1
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS.
- Product
- Cluster
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Jan 9, 2001Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documCVE-2000-1134 · Other software · Immunix · reported by MITREHigh 7.2
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
- Product
- Immunix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgpatches.sgi.com
Jan 9, 2001elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attCVE-2000-1136 · Other software · Debian · reported by MITREMedium 4.6
elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack.
- Product
- Elvis Tiny
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jan 9, 2001GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.CVE-2000-1137 · Other software · GNU · reported by MITREMedium 4.6
GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
- Product
- ED
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddistro.conectiva.com.brdebian.org
Jan 9, 2001StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who CVE-2000-1156 · Other software · SUN · reported by MITRELow 3.6
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
- Product
- Staroffice
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jan 9, 2001ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.CVE-2000-1162 · Other software · Aladdin Enterprises · reported by MITRELow 3.7
ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
- Product
- Ghostscript
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddistro.conectiva.com.brcalderasystems.com
Jan 9, 2001fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.CVE-2000-1135 · Other software · Debian · reported by MITREMedium 4.6
fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 19, 2000HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting tCVE-2000-0972 · Other software · HP · reported by MITREMedium 5.5
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
- Product
- Hp-ux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comexchange.xforce.ibmcloud.com
Dec 19, 2000Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.CVE-2000-0934 · Other software · Redhat · reported by MITREHigh 7.2
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordredhat.comsecurityfocus.com
Dec 19, 2000GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.CVE-2000-0948 · Other software · Gnome · reported by MITREHigh 7.2
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
- Product
- Gnorpm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Dec 19, 2000Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.CVE-2000-0935 · Other software · Samba · reported by MITREHigh 7.2
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
- Product
- Samba
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Oct 20, 2000The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/CVE-2000-0691 · Other software · Gert Doering · reported by MITRELow 2.1
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
- Product
- Mgetty
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Oct 20, 2000inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.CVE-2000-0799 · Other software · SGI · reported by MITRELow 3.7
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.
- Product
- Irix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpatches.sgi.comsecurityfocus.com
Oct 20, 2000xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.CVE-2000-0728 · Other software · Xpdf · reported by MITREHigh 7.2
xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Xpdf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 20, 2000The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf,CVE-2000-0724 · Other software · Helix Code · reported by MITREMedium 6.2
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
- Product
- Go-gnome Pre-installer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Oct 20, 2000DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file.CVE-2000-0715 · Other software · Kirk Bauer · reported by MITRELow 2.1
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file.
- Product
- Diskcheck
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgseclists.org
Oct 20, 2000The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to theCVE-2000-0702 · Other software · HP · reported by MITREHigh 7.2
The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.
- Product
- Hp-ux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Oct 20, 2000Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.CVE-2000-0698 · Other software · Minicom · reported by MITREMedium 5
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.
- Product
- Minicom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Oct 20, 2000pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.CVE-2000-0694 · Other software · Tech-source · reported by MITREHigh 7.2
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
- Product
- Raptor GFX Pgx32
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Oct 20, 2000The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.CVE-2000-0031 · Other software · Redhat · reported by MITREMedium 6.2
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jul 3, 2000makewhatis in Linux man package allows local users to overwrite files via a symlink attack.CVE-2000-0566 · Other software · Caldera · reported by MITREHigh 7.2
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
- Product
- Openlinux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.caldera.comarchives.neohapsis.com
Jun 2, 2000man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.CVE-2000-0468 · Other software · HP · reported by MITREMedium 4.6
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
- Product
- Hp-ux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
May 10, 2000Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.CVE-2000-0409 · Other software · Netscape · reported by MITRELow 3.7
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
- Product
- Communicator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Apr 21, 2000Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-0336 · Other software · Openldap · reported by MITRELow 2.1
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
- Product
- Openldap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.calderasystems.comredhat.com
Apr 18, 2000The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.CVE-2000-0270 · Other software · GNU · reported by MITRELow 3.6
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
- Product
- Emacs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Mar 5, 2000The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gCVE-2000-0206 · Other software · Oracle · reported by MITREMedium 6.2
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
- Product
- Oracle8i
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Feb 21, 2000The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.CVE-2000-0210 · Other software · SUN · reported by MITRELow 1.2
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
- Product
- Workshop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 16, 2000The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-0154 · Other software · SCO · reported by MITRELow 1.2
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsco.comsecurityfocus.com
Feb 15, 2000ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.CVE-2000-0224 · Other software · SCO · reported by MITRELow 1.2
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 1, 2000GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.CVE-2000-0151 · Other software · GNU · reported by MITREMedium 6.2
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
- Product
- Make
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 1, 2000Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-0107 · Other software · Debian · reported by MITREHigh 7.2
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Jan 19, 2000The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-0092 · Other software · Freebsd · reported by MITREMedium 6.2
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgsecurityfocus.com
Jan 17, 2000VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.CVE-2000-0090 · Other software · VMware · reported by MITRELow 3.6
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
- Product
- Workstation
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Jan 11, 2000CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.CVE-2000-0067 · Other software · Cybercash · reported by MITRELow 2.1
CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
- Product
- Merchant Connection KIT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 10, 2000AIX techlibss allows local users to overwrite files via a symlink attack.CVE-2000-0080 · Other software · IBM · reported by MITRELow 2.1
AIX techlibss allows local users to overwrite files via a symlink attack.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jan 4, 2000KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.CVE-1999-0735 · Other software · KDE · reported by MITREMedium 4.6
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
- Product
- K-mail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordredhat.comsecurityfocus.com
Dec 31, 1999linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.CVE-1999-1328 · Other software · Redhat · reported by MITREHigh 7.2
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.