Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

CVEs (1,606)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-1593 1Gnu 1A2ps May 6, 2026 Apr 5, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary fil...Show more The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.Show less
CVE-2014-1272 1Apple 2Iphone Os Tvos May 6, 2026 Mar 14, 2014 N/A· v4 N/A· v3 6.3 MEDIUM· v2 CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink.
CVE-2014-1838 2Logilab Opensuse 2Logilab Common Opensuse May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 4.4 MEDIUM· v2 The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /...Show more The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.Show less
CVE-2011-3153 2Canonical Robert Ancell 2Lightdm Ubuntu Linux May 6, 2026 Mar 6, 2014 N/A· v4 N/A· v3 1.9 LOW· v2 dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
CVE-2012-1088 1Iproute2 Project 1Iproute2 Apr 29, 2026 Feb 15, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
CVE-2014-1876 1Oracle 1Openjdk Apr 29, 2026 Feb 10, 2014 N/A· v4 N/A· v3 4.4 MEDIUM· v2 The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary...Show more The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.Show less
CVE-2010-4226 2Gnu Opensuse 2Cpio Opensuse Apr 29, 2026 Feb 6, 2014 N/A· v4 7.2 HIGH· v3 5.0 MEDIUM· v2 cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
CVE-2014-1640 1Debian 1Axiom Apr 29, 2026 Jan 28, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a...Show more axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.Show less
CVE-2014-1639 1Debian 1Syncevolution Apr 29, 2026 Jan 28, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwr...Show more syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.Show less
CVE-2014-1638 1Debian 1Localepurge Apr 29, 2026 Jan 28, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 (1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows l...Show more (1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.Show less
CVE-2014-1624 1Python 1Pyxdg Apr 29, 2026 Jan 28, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned locati...Show more Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.Show less
CVE-2014-0027 1Cmu 1Flite Apr 29, 2026 Jan 26, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party informatio...Show more The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information.Show less
CVE-2013-6891 2Apple Canonical 2Cups Ubuntu Linux Apr 29, 2026 Jan 26, 2014 N/A· v4 N/A· v3 1.2 LOW· v2 lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
CVE-2013-2142 1Libimobiledevice 1Libimobiledevice Apr 29, 2026 Jan 19, 2014 N/A· v4 N/A· v3 3.3 LOW· v2 userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobilede...Show more userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.Show less
CVE-2013-4969 4Canonical DebianPuppet+1 more 4Debian Linux PuppetPuppet Enterprise+1 more Apr 29, 2026 Jan 7, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.
CVE-2013-6402 1Hp 1Linux Imaging And Printing Project Apr 29, 2026 Jan 5, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
CVE-2013-2561 2Openfabrics Redhat 2Enterprise Linux Ibutils Apr 29, 2026 Nov 23, 2013 N/A· v4 N/A· v3 6.3 MEDIUM· v2 OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs,...Show more OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/.Show less
CVE-2012-0786 1Augeas 1Augeas Apr 29, 2026 Nov 23, 2013 N/A· v4 N/A· v3 3.3 LOW· v2 The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
CVE-2013-4214 2Nagios Redhat 2Nagios Openstack Apr 29, 2026 Nov 23, 2013 N/A· v4 N/A· v3 6.3 MEDIUM· v2 rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.
CVE-2013-2029 1Redhat 1Openstack Apr 29, 2026 Nov 23, 2013 N/A· v4 N/A· v3 6.3 MEDIUM· v2 nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a...Show more nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/.Show less

Previous 1...616263...81 Next