CVE-2004-1901: Improper Link Resolution Before File Access

Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles...

CVE-2004-1895: Undefined Security Weakness

YaST Online Update YOU in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies...

CVE-2005-1168

DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument...

CVE-2005-1270: Undefined Security Weakness

The 1 checkupdate.sh and 2 rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

security flaw

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-1168: Undefined Security Weakness

DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument...

Trojan file issue in Musicmatch software

Hyperdose Security Advisory Name: Arbitrary file overwrite in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...

CVE-2005-0894: Undefined Security Weakness

OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on 1 temporary files in the openmosixcollector directory or 2 nodes.tmp...

CVE-2005-0795: Undefined Security Weakness

HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified votefilename parameter...

CVE-2005-0796: Undefined Security Weakness

Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB/votes" followed by a .. dot dot in the votefilename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory...

CVE-2005-0099: Undefined Security Weakness

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

GLSA-200502-32 : UnAce: Buffer overflow and directory traversal vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200502-32 UnAce: Buffer overflow and directory traversal vulnerabilities Ulf Harnhammar discovered that UnAce suffers from buffer overflows when testing, unpacking or listing specially crafted ACE archives CAN-2005-0160. He also...

CVE-2005-0161

CVE-2005-0161 concerns unace 1.2b, with confirmed issues in multiple advisories. The vulnerability allows directory traversal via ACE archives containing sequences such as "../" or absolute pathnames, potentially enabling overwriting arbitrary files. Some sources also describe buffer overflows du...

CVE-2005-0161: Undefined Security Weakness

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...

CVE-2005-0161

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...

DEBIAN-CVE-2005-0161

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...

xfinder-ds.pl

HEADER: OSX Finder DSStore arbitrary file overwrite vulnerability. CONTACT: vade79 - [email protected] fakehalo/realhalo CATEGORY: Local with user intervention. IMPACT: Privilege escalation. REFERENCE: http://fakehalo.us/xfinder-ds.pl BACKGROUND: The Finder is the application that Mac OS X and earli...

CVE-2003-1081: Undefined Security Weakness

Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file...

Apple Mac OSX - '.DS_Store' Arbitrary File Overwrite

!/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using Finder in almost any waysuch as copying a file out ...

Apple Mac OSX - .DS_Store Arbitrary File Overwrite

Apple Mac OSX - .DSStore Arbitrary File Overwrite !/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using...