CVE-2008-2475

The CVE-2008-2475 entry concerns the eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) prior to version 1.0.27. The underlying flaw allows remote command execution through the PictureUrls property when the ActiveX control is used in a page, enabling arbitrary commands to run with...

Fedora Update for dovecot FEDORA-2008-2475

Check for the Version of dovecot OpenVAS Vulnerability Test Fedora Update for dovecot FEDORA-2008-2475 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

FreeBSD Ports: unzip, zh-unzip, ko-unzip

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 903-1 (unzip)

The remote host is missing an update to unzip announced via advisory DSA 903-1. Imran Ghory discovered a race condition in the permissions setting code in unzip. When decompressing a file in a directory an attacker has access to, unzip could be tricked to set the file permissions to a different...

Debian Security Advisory DSA 903-1 (unzip)

The remote host is missing an update to unzip announced via advisory DSA 903-1. Imran Ghory discovered a race condition in the permissions setting code in unzip. When decompressing a file in a directory an attacker has access to, unzip could be tricked to set the file permissions to a different...

Debian: Security Advisory (DSA-903-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Solaris 9 (x86) : 125139-97

JavaSE 6x86: update 101 patch equivalent. Date this patch was last updated by Sun : Jul/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (x86) : 125139-97

JavaSE 6x86: update 101 patch equivalent. Date this patch was last updated by Sun : Jul/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 125139-97 (deprecated)

JavaSE 6x86: update 101 patch equivalent. Date this patch was last updated by Sun : Jul/13/15 This plugin has been deprecated and either replaced with individual 125139 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Low: Red Hat Bug Fix Advisory: unzip bug fix update

Updated unzip packages that address various bugs are now available. The unzip utility is used to list, test, or extract files from a zip archive. This update addresses the following issues: a TOCTOU bug that could be exploited to change file permissions CVE-2005-2475 a long filename buffer overfl...

CVE-2007-2475

Affected product: Novell SecureLogin (NSL) 6 SP1 prior to 6.0.106, specifically the ADSCHEMA utility. Issue: A vulnerability that permits a user to gain excessive permissions to their own attributes in an Active Directory (AD) environment. Impact/notes: The vulnerability is described in the conne...

RHEL 4 : unzip (RHSA-2007:0203)

Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...

Low: Red Hat Security Advisory: unzip security and bug fix update

Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...

CVE-2006-2475

The CVE-2006-2475 entry concerns Cosmoshop (versions up to 8.11.106) with a directory traversal vulnerability in the edit_mailtexte.cgi and bestmail.cgi utilities. The underlying issue is improper handling of the file parameter, allowing remote admins to read arbitrary files via .. sequences. Imp...

FreeBSD : unzip -- permission race vulnerability (9750cf22-216d-11da-bc01-000e0c2e438a)

Imran Ghory reports a vulnerability within unzip. The vulnerability is caused by a race condition between extracting an archive and changing the permissions of the extracted files. This would give an attacker enough time to remove a file and hardlink it to another file owned by the user running...

Ubuntu 4.10 / 5.04 : unzip vulnerability (USN-191-1)

Imran Ghory found a race condition in the handling of output files. While a file was unpacked by unzip, a local attacker with write permissions to the target directory could exploit this to change the permissions of arbitrary files of the unzip user. Note that Tenable Network Security has extract...

CVE-2004-2475

The CVE-2004-2475 entry concerns a cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 that could allow remote scripts to be injected via about.html in the About section. The connected documentation notes that demonstrations using the res:// protocol may not cross privilege bound...

CVE-2005-2475

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete...

CVE-2005-2475

The provided data confirms CVE-2005-2475: a race condition in unzip allows local users to modify permissions of arbitrary files via a hard link attack during decompression. This is evidenced by multiple advisories (RHSA-2007:0203, ELSA-2007-0203, CESA-2007:0203, CESAs for RHEL/CentOS) describing ...