webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs.
Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack.
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.
rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.