FreeBSD : xine-lib arbitrary file overwrite (e50b04e8-9c55-11d8-9366-0020ed76ef5a)

From the xinehq advisory : By opening a malicious MRL in any xine-lib based media player, an attacker can write arbitrary content to an arbitrary file, only restricted by the permissions of the user running the application. The flaw is a result of a feature that allows MRLs media resource locator...

CVE-2009-1253: Improper Link Resolution Before File Access

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs:...

Gentoo Security Advisory GLSA 200903-39 (pam_krb5)

The remote host is missing updates announced in advisory GLSA 200903-39. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2008-6552: Improper Link Resolution Before File Access

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2009-0637: Undefined Security Weakness

The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to 1 read or 2 overwrite arbitrary files via an SCP command...

CVE-2008-6490: Improper Input Validation

function/updatexml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying the target filename in the targetfile parameter. NOTE: this can be leveraged for code execution by overwriting a PHP file, as demonstrated using function/uploadfile.php...

Morovia Barcode ActiveX Control < 3.6.0 Arbitrary File Overwrite

The version of the Morovia Barcode ActiveX control installed on the remote Windows host allows overwriting of arbitrary files via calls to the control's 'Save' and 'ExportImage' methods. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can...

CVE-2008-6442: Undefined Security Weakness

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-6398

sngregress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/recompiled$$.png, 2 /tmp/decompiled$$.sng, and 3 /tmp/canonicalized$$.sng temporary files...

CVE-2008-6397: Improper Link Resolution Before File Access

rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Mandrake Security Advisory MDVSA-2009:041 (jhead)

The remote host is missing an update to jhead announced via advisory MDVSA-2009:041. OpenVAS Vulnerability Test $Id: mdksa2009041.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:041 jhead Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0361: Undefined Security Weakness

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pamsetcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, a...

CVE-2009-0313: Improper Link Resolution Before File Access

winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the xshowmenu.txt temporary file...

CVE-2009-0134: Undefined Security Weakness

Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the 1 DoSaveFile or 2 DoSaveHtmlFile method. NOTE: vector 1 could be leveraged for code execution by...

Ciansoft PDFBuilderX 2.2 ActiveX Arbitrary File Overwrite Exploit

No description provided by source. b Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite br/ p0c br/ Alfons Luja br/ Pozdrowienia dla odFiecznych fanÓf br/ Tesw Eporue br/ -9002- br/ l00l br/ b/ object classid='clsid:00E7C7F8-71E2-498A-AB28-A3D72FC74485' id='kupa'/object script / Class PDFDoc GUID:...

Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite

Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite p0c Alfons Luja Pozdrowienia dla odFiecznych fanÓf Tesw Eporue -9002- l00l / Class PDFDoc GUID: 00E7C7F8-71E2-498A-AB28-A3D72FC74485 RegKey Safe for Script: False RegKey Safe for Init:...

Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite

Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite p0c Alfons Luja Pozdrowienia dla odFiecznych fanÓf Tesw Eporue -9002- l00l / Class PDFDoc GUID: 00E7C7F8-71E2-498A-AB28-A3D72FC74485 RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for...

Ciansoft PDFBuilderX 2.2 ActiveX Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================================= Ciansoft PDFBuilderX 2.2 ActiveX Arbitrary File Overwrite Exploit ================================================================= Ciansoft PDFBuilderX 2.2 Arbitrary File...

PDFBuilderX 2.2 Arbitrary File Overwrite

Alfons Luja ======================================================================================================================== b Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite br/ p0c br/ Alfons Luja br/ Pozdrowienia dla odFiecznych fanOf br/ Tesw Eporue br/ -9002- br/ l00l br/ b/ object...