Security Vulnerabilities Related To CWE-59

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-19044	59		2018-11-08	2019-01-09	3.3	None	Local	Medium	Not required	None	Partial	Partial
keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.
2	CVE-2018-17567	59		2018-09-27	2018-12-28	5.0	None	Remote	Low	Not required	Partial	None	None
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "_config.yml" file.
3	CVE-2018-15351	59	DoS	2018-08-17	2018-10-15	7.1	None	Remote	Medium	Not required	None	None	Complete
Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firmware version 3.5.30.1118.
4	CVE-2018-14651	59	DoS Exec Code	2018-10-31	2018-12-11	6.5	None	Remote	Low	Single system	Partial	Partial	Partial
It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.
5	CVE-2018-13054	59		2018-07-02	2018-09-04	5.8	None	Remote	Medium	Not required	None	Partial	Partial
An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.
6	CVE-2018-12026	59		2018-06-17	2018-10-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in turn can result in information disclosure and privilege escalation.
7	CVE-2018-10928	59	Exec Code	2018-09-04	2018-11-06	6.5	None	Remote	Low	Single system	Partial	Partial	Partial
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.
8	CVE-2018-10722	59		2018-05-03	2018-06-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink chain to a pathname of an arbitrary DLL that CyUpdate uses.
9	CVE-2018-10380	59		2018-05-08	2018-06-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack.
10	CVE-2018-6557	59	DoS	2018-08-21	2018-11-21	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions were disabled.
11	CVE-2018-5225	59	Exec Code	2018-03-22	2018-04-20	6.5	None	Remote	Low	Single system	Partial	Partial	Partial
In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x), 5.6.0 before 5.6.5 (the fixed version for 5.6.x), 5.7.0 before 5.7.3 (the fixed version for 5.7.x), and 5.8.0 before 5.8.2 (the fixed version for 5.8.x), allows authenticated users to gain remote code execution using the in browser editing feature via editing a symbolic link within a repository.
12	CVE-2018-5107	59	Bypass	2018-06-11	2018-06-25	5.0	None	Remote	Low	Not required	Partial	None	None
The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. The printing process requires files in a specific format so arbitrary data cannot be read but it is possible that some local file information could be exposed. This vulnerability affects Firefox < 58.
13	CVE-2018-4112	59	+Info	2018-04-03	2018-04-27	4.3	None	Remote	Medium	Not required	Partial	None	None
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "ATS" component. It allows attackers to obtain sensitive information by leveraging symlink mishandling.
14	CVE-2018-1834	59		2018-11-08	2018-12-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to escalate their privileges to root through a symbolic link attack. IBM X-Force ID: 150511.
15	CVE-2018-1781	59		2018-11-08	2018-12-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148804.
16	CVE-2018-1780	59		2018-11-08	2018-12-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148803.
17	CVE-2018-1196	59		2018-03-19	2018-04-20	4.3	None	Remote	Medium	Not required	None	Partial	None
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "run_user" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.
18	CVE-2018-1063	59		2018-03-02	2018-04-11	3.3	None	Local	Medium	Not required	Partial	Partial	None
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
19	CVE-2017-1002101	59		2018-03-13	2018-04-11	5.5	None	Remote	Low	Single system	Partial	Partial	None
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
20	CVE-2017-1000420	59		2018-01-02	2018-01-16	6.4	None	Remote	Low	Not required	None	Partial	Partial
Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite
21	CVE-2017-1000115	59		2017-10-04	2018-01-04	5.0	None	Remote	Low	Not required	None	Partial	None
Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository
22	CVE-2017-18188	59		2018-02-14	2018-03-09	2.1	None	Local	Low	Not required	Partial	None	None
OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.
23	CVE-2017-15111	59		2018-01-19	2018-02-05	3.6	None	Local	Low	Not required	None	Partial	Partial
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
24	CVE-2017-15097	59		2018-07-27	2018-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.
25	CVE-2017-12172	59		2017-11-22	2017-12-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
26	CVE-2017-9525	59	+Priv	2017-06-09	2017-07-26	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
27	CVE-2017-8806	59	DoS	2017-11-13	2017-12-08	3.6	None	Local	Low	Not required	None	Partial	Partial
The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local denial of service by overwriting arbitrary files.
28	CVE-2017-7549	59		2017-09-21	2018-01-04	3.3	None	Local	Medium	Not required	Partial	Partial	None
A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
29	CVE-2017-7501	59	DoS	2017-11-22	2018-11-29	4.6	None	Local	Low	Not required	Partial	Partial	Partial
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.
30	CVE-2017-7500	59	+Priv	2018-08-13	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.
31	CVE-2017-7418	59	Bypass	2017-04-04	2017-04-11	2.1	None	Local	Low	Not required	None	Partial	None
ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.
32	CVE-2017-2916	59		2017-11-07	2017-11-28	9.0	None	Remote	Low	Single system	Complete	Complete	Complete
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request to trigger this vulnerability.
33	CVE-2017-1301	59		2017-10-05	2017-10-25	3.6	None	Local	Low	Not required	None	Partial	Partial
IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163.
34	CVE-2016-10374	59		2017-05-17	2017-05-31	2.1	None	Local	Low	Not required	None	Partial	None
perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete.
35	CVE-2016-9774	59	+Priv +Info	2017-03-23	2018-08-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u8 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to obtain sensitive information or gain root privileges via a symlink attack on the Catalina localhost directory.
36	CVE-2016-9602	59		2018-04-26	2018-09-07	9.0	None	Remote	Low	Single system	Complete	Complete	Complete
Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
37	CVE-2016-9595	59		2018-07-27	2018-09-24	3.6	None	Local	Low	Not required	None	Partial	Partial
A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
38	CVE-2016-8641	59		2018-08-01	2018-10-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
39	CVE-2016-7619	59		2017-02-20	2018-10-30	2.1	None	Local	Low	Not required	None	Partial	None
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "libarchive" component, which allows local users to write to arbitrary files via vectors related to symlinks.
40	CVE-2016-6664	59	+Priv	2016-12-13	2018-10-09	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
41	CVE-2016-6253	59		2017-01-20	2017-01-20	7.2	None	Local	Low	Not required	Complete	Complete	Complete
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
42	CVE-2016-4679	59		2017-02-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libarchive" component, which allows remote attackers to write to arbitrary files via a crafted archive containing a symlink.
43	CVE-2016-3108	59		2017-06-08	2018-01-04	3.6	None	Local	Low	Not required	Partial	Partial	None
The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack.
44	CVE-2016-3096	59	+Priv	2016-06-03	2018-10-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.
45	CVE-2016-1255	59	+Priv	2017-12-05	2017-12-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.
46	CVE-2016-1247	59	+Priv	2016-11-29	2018-10-09	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.
47	CVE-2015-8860	59		2017-01-23	2017-01-24	5.0	None	Remote	Low	Not required	None	Partial	None
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive.
48	CVE-2015-8326	59		2017-06-07	2017-06-14	3.6	None	Local	Low	Not required	None	Partial	Partial
The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.
49	CVE-2015-7758	59		2016-01-08	2018-10-30	2.1	None	Local	Low	Not required	None	Partial	None
Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .toc extension for the file name, as demonstrated by .thesis.tex.aux.
50	CVE-2015-7724	59	+Priv	2017-06-07	2018-10-09	7.2	None	Local	Low	Not required	Complete	Complete	Complete
AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exists due to an incomplete fix for CVE-2015-7723.

Total number of vulnerabilities : 491 Page : 1 (This Page)2 3 4 5 6 7 8 9 10