CVE-2006-0932

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::ArchiveZip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive...

CVE-2006-0931

CVE-2006-0931 affects PEAR::Archive_Tar 1.2 and other versions before 1.3.2. A directory traversal vulnerability allows remote attackers to create and overwrite arbitrary files via crafted pathnames in a TAR archive. Affected component: Archive_Tar.Impact is confirmed as directory traversal; no e...

FarsiNews <= 2.5 Directory Traversal Arbitrary (users.db) Access Exploit

No description provided by source. !/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / /\ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name : FarsiNews...

Directory traversal

Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in 1 ZipStar 5.1 and 2 SpeedCommander 11.01.4450, allows remote attackers to overwrite arbitrary files via unspecified manipulations in a 1 JAR or 2 ZIP archive...

CVE-2006-0890

Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in 1 ZipStar 5.1 and 2 SpeedCommander 11.01.4450, allows remote attackers to overwrite arbitrary files via unspecified manipulations in a 1 JAR or 2 ZIP archive...

StuffIt and ZipMagic Family of products Directory traversal

StuffIt and ZipMagic Family of products Directory traversal The StuffIt and ZipMagic Family of products is designed to meet any level of compression needs; from basic expansion to advanced archive manipulation, to automating routine compression tasks, and even building compression into a software...

Archive_Tar v 1.2(Tested) (Tar file management class) Directory traversal

ArchiveZipr Zip file management class Directory traversal This class provides handling of tar files in PHP. It supports creating, listing, extracting and adding to tar files. Gzip support is available if PHP has the zlib extension built-in or loaded. Bz2 compression is also supported with the bz2...

Heap overflow

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

CVE-2006-0813

CVE-2006-0813 describes a heap-based buffer overflow in WinACE 2.60 triggered by a large ARJ header block. The underlying issue is a boundary/heap buffer handling error when reading an oversized ARJ header, allowing a user-assisted attacker to execute arbitrary code when a malicious ARJ archive i...

CVE-2006-0813

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

Safari archive metadata command execution

Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...

USN-257-1: tar vulnerability

Jim Meyering discovered that tar did not properly verify the validity of certain header fields in a GNU tar archive. By tricking an user into processing a specially crafted tar archive, this could be exploited to execute arbitrary code with the privileges of the user. The tar version in Ubuntu 4....

Apple Mac OSX Safari Browser - 'Safe File' Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Apple Mac OS X Archive Metadata Command Execution Vulnerability

Description Apple Mac OS X is prone to an arbitrary command-execution vulnerability when processing metadata in archive files. Commands would be executed in the context of the user opening the archive file. Attackers can reportedly use Safari and Apple Mail as exploitation vectors for this...

CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via 1 a UUE file containing an encoded file with a long filename handled by uudrdr.dll, 2 a compressed ZIP file with a...

CVE-2005-2619

The CVE-2005-2619 issue affects Lotus Notes (6.5.4 and 7.0) using Autonomy/Verity KeyView SDK kvarcve.dll (pre-9.2.0). The vulnerability arises in the preview generation of archives (ZIP, UUE, TAR) where a filename containing .. can lead to directory traversal and deletion of arbitrary files acce...

farsiNews.txt

FarsiNews 2.5 Multiple Vulnerabilities FarsiNews is a News Publishing System That uses Flat files to store its Datas... Farsinews is a persian and improved translation of CuteNews, AjFork, CuteHack and CuteSQL... for more information about FarsiNews Publishing System visit...

Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow

====================================================================== Secunia Research 10/02/2006 - Lotus Notes TAR Reader File Extraction Buffer Overflow - ====================================================================== Table of Contents Affected...

DSA-959-1 unalz - buffer overflow

Bulletin has no description...

[eVuln] Note-A-Day Weblog Sensitive Information Disclosure

New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...