← Back
CWE-59

1,606 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

JSON object

Loading...

CVEs (1,606)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5303
1Monkey Project
1Monkey
Apr 29, 2026
Oct 5, 2012
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname.
CVE-2011-5146
1Ingumadev
1Bokken
Apr 29, 2026
Aug 31, 2012
N/A· v4
N/A· v3
2.6 LOW· v2
Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot.
CVE-2012-2103
1Munin Monitoring
1Munin
Apr 29, 2026
Aug 26, 2012
N/A· v4
N/A· v3
1.2 LOW· v2
The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
CVE-2012-4676
1Google
1Tunnelblick
Apr 29, 2026
Aug 26, 2012
N/A· v4
N/A· v3
1.2 LOW· v2
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.
CVE-2012-3440
2Redhat
Todd Miller
2Enterprise Linux
Sudo
Apr 29, 2026
Aug 8, 2012
N/A· v4
N/A· v3
5.6 MEDIUM· v2
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
CVE-2011-4028
1X.org
1X Server
Apr 29, 2026
Jul 3, 2012
N/A· v4
N/A· v3
1.2 LOW· v2
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the fil...Show more
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists.Show less
CVE-2012-3345
1Ioquake3
1Ioquake3 Engine
Apr 29, 2026
Jun 15, 2012
N/A· v4
N/A· v3
5.6 MEDIUM· v2
ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.
CVE-2011-2722
1Hp
1Linux Imaging And Printing Project
Apr 29, 2026
May 25, 2012
N/A· v4
N/A· v3
1.2 LOW· v2
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temp...Show more
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.Show less
CVE-2012-2093
1Gajim
1Gajim
Apr 29, 2026
May 18, 2012
N/A· v4
N/A· v3
3.3 LOW· v2
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.
CVE-2012-0808
1Bdale Garbee
1As31
Apr 29, 2026
Mar 19, 2012
N/A· v4
N/A· v3
3.6 LOW· v2
as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack.
CVE-2012-0054
1Golismero
1Golismero
Apr 29, 2026
Mar 19, 2012
N/A· v4
N/A· v3
3.3 LOW· v2
libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero...Show more
libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.Show less
CVE-2011-4105
1Robert Ancell
1Lightdm
Apr 29, 2026
Feb 17, 2012
N/A· v4
N/A· v3
1.9 LOW· v2
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
CVE-2011-1384
1Ibm
1Invscout.rte
Apr 29, 2026
Jan 4, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout ope...Show more
The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.Show less
CVE-2011-4617
1Python
1Virtualenv
Apr 29, 2026
Dec 31, 2011
N/A· v4
N/A· v3
1.2 LOW· v2
virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
CVE-2011-3616
1Conky
1Conky
Apr 29, 2026
Nov 4, 2011
N/A· v4
N/A· v3
6.3 MEDIUM· v2
The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf.
CVE-2011-3870
2Puppet
Puppetlabs
2Puppet
Puppet
Apr 29, 2026
Oct 27, 2011
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.
CVE-2011-3869
2Puppet
Puppetlabs
2Puppet
Puppet
Apr 29, 2026
Oct 27, 2011
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.
CVE-2011-4060
1Qnx
1Neutrino Rtos
Apr 29, 2026
Oct 18, 2011
N/A· v4
N/A· v3
3.3 LOW· v2
The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users...Show more
The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack.Show less
CVE-2011-3204
1Geoff Wong
1Hammerhead
Apr 29, 2026
Sep 6, 2011
N/A· v4
N/A· v3
3.3 LOW· v2
hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/hammer.log (aka the HH_LOG file) or (2) the REPORT_LOG file.
CVE-2011-0541
1Fuse
1Fuse
Apr 29, 2026
Sep 2, 2011
N/A· v4
N/A· v3
3.3 LOW· v2
fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.