CVE-2006-0950

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...

Ubuntu 5.04 / 5.10 : tar vulnerability (USN-257-1)

Jim Meyering discovered that tar did not properly verify the validity of certain header fields in a GNU tar archive. By tricking an user into processing a specially crafted tar archive, this could be exploited to execute arbitrary code with the privileges of the user. The tar version in Ubuntu 4....

Buffer overflow

Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI. NOTE: technical details will be released after the grace period has ende...

CVE-2006-1044

Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI. NOTE: technical details will be released after the grace period has ende...

CVE-2006-1044

Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI. NOTE: technical details will be released after the grace period has ende...

CVE-2006-1044

CVE-2006-1044 affects LISTSERV 14.3/14.4 (including LISTSERV Lite and HPO) with the WA CGI web interface enabled. The CERT/NVD reports describe multiple buffer overflow vulnerabilities in the WA CGI component that could allow a remote attacker to execute arbitrary code on the affected system. The...

Directory traversal

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0981

CVE-2006-0981 describes a directory traversal in e-merge WinAce 2.6 and earlier, where improper handling of archived file paths in TAR (and ZIP) archives allows remote attackers to create or overwrite arbitrary files. CPAI advisory adds that exploitation may lead to code execution depending on lo...

Moderate: Red Hat Security Advisory: tar security update

An updated tar package that fixes a buffer overflow bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual fil...

CVE-2006-0931

Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive...

CVE-2006-0932

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::ArchiveZip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive...

Directory traversal

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::ArchiveZip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive...

Directory traversal

Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0926

Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0931

Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive...

Directory traversal

Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive...

CVE-2006-0926

Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0932

The CVE-2006-0932 entry describes a directory traversal vulnerability in PEAR::Archive_Zip (zip.lib.php 0.1.1). The affected component is zip.lib.php within PEAR::Archive_Zip, where crafted ZIP archive pathnames allow remote attackers to create or overwrite arbitrary files. The published descript...

CVE-2006-0931

Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive...

CVE-2006-0926

CVE-2006-0926 describes multiple directory traversal vulnerabilities in Allume StuffIt Standard/Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21, allowing remote attackers to create and overwrite arbitrary files via crafted pathnames in a (1) zip or (2) tar archive. ...