Skip to content
OpenAdvisories

Weakness (CWE)

CWE-59: Improper Link Resolution Before File Access

Base Draft

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Follow the principle of least privilege when assigning access rights to entities in a software system.

    Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.

Source: MITRE CWE-59

All Critical High Medium Low Exploited only Public exploit

407 results · Clear filters · Feed

  • Medium —
    CVE-2011-3869

    Puppet arbitrary file overwrite

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2011-3870

    Puppet allows local users to modify the permissions of arbitrary files

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2011-2185

    Fabric vulnerable to symlink attack on tmp files

    Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.

    fabric fabric Debian PyPI
  • Medium —
    CVE-2010-4338

    ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack

    ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.

    ocrodjvu PyPI
  • Medium —
    CVE-2008-5153

    Moodle vulnerable to symlink attack

    spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file.

    moodle/moodle Packagist
  • Medium 5.5
    CVE-2008-4996

    init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramf…

    initramfs-tools Debian
  • Medium 5.5
    CVE-2004-1901

    Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.