Path traversal

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

DSquare Exploit Pack: D2SEC_VMWARE_VIELIB

Name| d2secvmwarevielib ---|--- CVE| CVE-2007-4058 Exploit Pack| D2ExploitPack Description| VMware Vielib.DLL ActiveX Arbitrary Code Execution Vulnerability Notes|...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method...

Directory traversal

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability...

DSquare Exploit Pack: D2SEC_VMVIELIB

Name| d2secvmvielib ---|--- CVE| CVE-2007-4058 Exploit Pack| D2ExploitPack Description| VMware Vielib.DLL ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2007-4061

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...

CVE-2007-4062

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability...

CVE-2007-4058

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method...

CVE-2007-4067

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

CVE-2007-4061

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...

CVE-2007-4067

CVE-2007-4067 : An absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control (CLINETSUITEX6.OCX) of Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname passed as the second argument to the GetToFile method....

CVE-2007-4062

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability...

CVE-2007-4062

CVE-2007-4062 affects Nessus Vulnerability Scanner 3.0.6 via the SCANCTRL.ScanCtrlCtrl.1 ActiveX (scan.dll). The vulnerability arises in the deleteNessusRC method, likely a directory traversal, allowing remote attackers to delete arbitrary files. Related Nessus NASL indicates Nessus for Windows v...

CVE-2007-4061

CVE-2007-4061 : Directory traversal via .. in the Nessus ScanCtrl ActiveX (SCANCTRL.ScanCtrlCtrl.1 in scan.dll) allows remote creation/overwrite of arbitrary files through saveNessusRC, potentially enabling code execution by writing to a Startup folder. Affected product: Nessus Vulnerability Scan...

CVE-2007-4067

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

CVE-2007-4059

CVE-2007-4059 is an absolute path traversal in IntraProcessLogging.dll (Windows) affecting VMware Workstation/Server/Player components. The vulnerability allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the SetLogFileName function in IntraProcessLogging.dll (a...

CVE-2007-4059

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method...

CVE-2007-4058

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method...

CVE-2007-4058

CVE-2007-4058 is described as an Absolute Path Traversal in the VMware vielib.dll ActiveX (StartProcess) in VMware Workstation/6.0.0, allowing remote execution of arbitrary commands when a user loads attacker-controlled content. Affected component is the vielib.dll ActiveX control; trigger involv...

CVE-2007-4067: Undefined Security Weakness

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...