Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [symlink]

The tag has no usage guidance.

0
votes
0answers
9 views

Protecting Linux systems from symlink attacks [migrated]

Linux-based systems are vulnerable to symlink race attacks from unprivileged UID processes. For example, a PHP process can create a symlink to /etc/passwd in a directory where Apache httpd will serve ...
1
vote
1answer
296 views

Symlink file name - possible exploit?

I found a vulnerability in one of my managed website where I can give any name to the symlink file name source link. I cannot control the target directory link though. Also I can create as many ...
2
votes
2answers
128 views

Should programs check for symlinks before creating files?

We received a bug report (phrased as a security issue) for a program, which stated that when the program creates files on disk, it does not first verify if a symbolic link exists at the file path to ...
5
votes
1answer
192 views

Why do broken symlinks pose a security threat?

I have been given a security specification document that contains some rules about the product I currently work on (docker containers). One states that: All broken symlinks must be removed. My ...
4
votes
1answer
331 views

How to secure SFTP against symlink attack?

I've configured SFTP on my virtual machine, because I wanted to test how can I use symlink in order to access files outside from user home directory. I've created user: test:x:1003:1001::/var/www/...
3
votes
1answer
824 views

Will disabling “symlink” in PHP.ini prevent attackers from attacking other websites?

I have a small shared server where couple of websites are hosted, so I'm not sure if this kind of protection will be enough to prevent attackers from executing symlink attack. I've added symlink to ...
1
vote
1answer
629 views

Symlinks from public_html to directory linking to files in custom home directory

I have setup a multi-sites project on a VPS server with WHM and cPanel. Codebase is installed on a custom created folder named sites inside the cPanel user account home directory, with a subdomain ...
3
votes
1answer
6k views

Symbolic links, PATH and privilege escalation vulnerability

I am a bit inexperienced to this... I am using this VM https://www.vulnhub.com/entry/the-wall-1,130/ for practicing and there is a step I don't understand. Here: https://research.g0blin.co.uk/thewall-...
6
votes
2answers
2k views

Is it possible become root through a broken symlink owned by root and globally writeable?

I'm looking for a vulnerability on a server. I'm looking in the /var directory and I get something like this: drwxr-xr-x 3 root root 4.0K Aug 14 21:02 kerberos drwxr-xr-x 12 root root 4.0K Nov 11 ...
9
votes
1answer
2k views

Is symlink race a very common vulnerability in UNIX systems

As far as I know, when I am creating a new file or directory in a directory that can be written by multiple users (and thus an adversary can have made a symlink there), the only way to protect myself ...
8
votes
1answer
5k views

How zip symlink works?

I've seen lately some bugs that used zip symlink technique , can anyone explain how this vulnerability works , how attackers use it to exploit applications? Thanks