Vulnerabilities > Improper Link Resolution Before File Access ('Link Following')

DATE CVE VULNERABILITY TITLE RISK
2008-11-18 CVE-2008-5154 Link Following vulnerability in Koeniglich P3Nfs 5.19
bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file.
6.9
2008-11-18 CVE-2008-5153 Link Following vulnerability in Moodle 1.8.2
spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file.
local
moodle CWE-59
6.9
2008-11-18 CVE-2008-5152 Link Following vulnerability in Peter S Galbraith Mh-Book 2000605
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.
6.9
2008-11-18 CVE-2008-5151 Link Following vulnerability in Abottoms Mayavi 1.5
test_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file.
6.9
2008-11-18 CVE-2008-5150 Link Following vulnerability in Jose Carlos Medeiros Maildirsync 1.1
sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file.
6.9
2008-11-18 CVE-2008-5149 Link Following vulnerability in Aucko Libncbi6 6.1.20080302
fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
local
aucko CWE-59
6.9
2008-11-18 CVE-2008-5148 Link Following vulnerability in Geda Gnetlist 1.4.0
sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file.
local
geda CWE-59
6.9
2008-11-18 CVE-2008-5147 Link Following vulnerability in Holloway Docvert 2.4
test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file.
6.9
2008-11-18 CVE-2008-5146 Link Following vulnerability in ERL Wustl CTN 3.0.6
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.
6.9
2008-11-18 CVE-2008-5145 Link Following vulnerability in Debian LTP 20060918
ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file.
local
debian CWE-59
6.9