← Back
CWE-59

1,606 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

JSON object

Loading...

CVEs (1,606)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4970
1Lustre
1Lustre Tests
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.
CVE-2008-4969
1Alastair Mckinstry
1Ltp Network Test
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2....Show more
ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2.log, (g) /tmp/nfs_fsstress.udp.3.log, (h) /tmp/nfs_fsstress.tcp.2.log, (i) /tmp/nfs_fsstress.tcp.3.log, and (j) /tmp/nfs_fsstress.sardata temporary files, related to the (1) ftp_setup_vsftp_conf and (2) nfs_fsstress.sh scripts.Show less
CVE-2008-4968
1Bitmover
1Lmbench
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file.
CVE-2008-4967
1Linuxtrade
1Linuxtrade
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) m...Show more
linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts.Show less
CVE-2008-4966
1Openswan
1Linux Patch Openswan
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/snap##### and (b) /tmp/nightly##### temporary files, related to the (1) maysnap and (2) maytest scripts.
CVE-2008-4965
1Savonet
1Liguidsoap
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, and (3) /tmp/emission.ogg temporary files.
CVE-2008-4964
1Krzysztof Kozlowski
1Konwert
Apr 23, 2026
Nov 6, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.
CVE-2008-4960
1Dov Grobgeld
1Impose+
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files.
CVE-2008-4959
1Gpsdrive
1Gpsdrive Scripts
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, and (4) /tmp/geo#####.coords temporary files.
CVE-2008-4958
1Alejandro Garrido Mota
1Gdrae
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file.
CVE-2008-4957
1Gccxml
1Gccxml
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
find_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.cxx temporary file.
CVE-2008-4956
1Firewallbuilder
1Fwbuilder
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file.
CVE-2008-4955
1Duncan Webb
1Freevo
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.2 MEDIUM· v2
freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files. NOTE: this iss...Show more
freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files. NOTE: this issue is only a vulnerability when a verbose debug mode is activated by modifying source code.Show less
CVE-2008-4954
1Fumitoshi Ukai
1Fml
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file.
CVE-2008-4953
1Firehol
1Firehol
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, s...Show more
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824*PID-RANGE symlinks.Show less
CVE-2008-4952
1Emacs
1Emacs Jabber
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.log temporary file.
CVE-2008-4951
1Gplhost
1Dtc Common
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wra...Show more
dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts.Show less
CVE-2008-4950
1Debian
1Dpkg Cross
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in t...Show more
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot.Show less
CVE-2008-4949
1Manoj Srivastava
1Dist
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts.
CVE-2008-4948
1Nostatic
1Digitaldj
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.