IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML injection vulnerabilities affect the vulnerable software. The produc...

Mod_dosevasive symlink and race vulnerability

LSS Security Advisory LSS-2005-01-01 http://security.lss.hr --- Title : Moddosevasive symlink and race vulnerability Advisory ID : LSS-2005-01-4 Date : January 1th, 2005 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-01 Impact : Arbitrary file creation Risk level ...

CVE-2004-1610

SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the 1 vMME.AttachmentPath or 2 vMME.LibraryPath variables...

SLX Server 6.1 - Arbitrary File Creation

SLX Server 6.1 - Arbitrary File Creation !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the...

SLX Server 6.1 Arbitrary File Creation Exploit (PoC)

Exploit for unknown platform in category remote exploits ==================================================== SLX Server 6.1 Arbitrary File Creation Exploit PoC ==================================================== !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1...

SLX Server 6.1 Arbitrary File Creation Exploit (PoC)

No description provided by source. !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the filesyst...

SLX Server 6.1 - Arbitrary File Creation

!/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the filesystem of the SLX server. By using...

Debian DSA-486-1 : cvs - several vulnerabilities

Two vulnerabilities have been discovered and fixed in CVS : - CAN-2004-0180 Sebastian Krahmer discovered a vulnerability whereby a malicious CVS pserver could create arbitrary files on the client system during an update or checkout operation, by supplying absolute pathnames in RCS diffs. -...

CVS < 1.11.10 / 1.12.3 pserver Crafted Module Request Arbitrary File / Directory Creation

Binary data 1180.prm...

rsync < 2.6.1 Traversal Arbitrary File Creation

Binary data 1216.prm...

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

DEBIAN-CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

security flaw

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with 1 .. sequences or 2 absolute pathnames with double leading slashes "//absolute/path"...

Microsoft Internet Explorer 5 / Firefox 0.8 / OmniWeb 4.x - URI Protocol Handler Arbitrary File Creation/Modification

source: https://www.securityfocus.com/bid/10336/info A vulnerability has been identified in multiple products from multiple vendors that may allow a remote attacker to create or modify arbitrary files; these issues relate to the processing of URI requests via various protocol handlers including...

cvs security update

CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory affects both uses of CVS. A security problem which could allow a server to create arbitrary files on a client machine, and...

CVE-2004-0180

CVE-2004-0180 affects the CVS client prior to 1.11, where a malicious CVS server can cause arbitrary files to be created on a client during checkout/update by sending RCS diff files with absolute pathnames. This is a client-side vulnerability (remote server as attacker) that may also involve rela...

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

DSA-486 cvs - several vulnerabilities

Bulletin has no description...

Opera 7.22 File Creation and Execution Exploit (Malicious Webserver)

Exploit for unknown platform in category remote exploits ==================================================================== Opera 7.22 File Creation and Execution Exploit Malicious Webserver ==================================================================== !/usr/bin/perl Sample code of "Oper...

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation

source: https://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a malicious Web site that triggers this vulnerability and enticing a use...