CVE-2009-4053

Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to 1 create arbitrary directories via directory traversal sequences in an MKD command or 2 create files with any contents in arbitrary directories via directory traversal sequences in a fil...

CVE-2009-3557

The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments...

dovecot -- Insecure directory permissions

Dovecot author reports: Dovecot v1.2.x had been creating basedir and its parents if necessary with 0777 permissions. The basedir's permissions get changed to 0755 automatically at startup, but you may need to chmod the parent directories manually...

CVE-2009-3654

Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...

CVE-2009-3654

Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...

CVE-2009-3654

The vulnerability concerns Boost for Drupal (module) prior to 6.x-1.03. It allows remote attackers to create new webroot directories via unknown attack vectors. The root cause is not specified in the provided documents, and no remediation details (patch/version fixes) are described here. Exploit ...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : samba vulnerabilities (USN-839-1)

J. David Hester discovered that Samba incorrectly handled users that lack home directories when the automated homes share is enabled. An authenticated user could connect to that share name and gain access to the whole filesystem. CVE-2009-2813 Tim Prouty discovered that the smbd daemon in Samba...

[SECURITY] Fedora 10 Update: backintime-0.9.26-3.fc10

Back In Time is a simple backup system for Linux inspired from =E2=80=9Cflyback project=E2=80=9D and =E2=80=9CTimeVault=E2=80=9D. The back up is done by taking snapshots of a specified set of directories...

CVE-2009-3366

CVE-2009-3366 concerns a directory traversal vulnerability in navigation.php of An Image Gallery 1.0. The issue lets remote attackers list arbitrary directories by supplying .. in the path parameter. Public sources (NVD entry) rate this with CVSSv2 base score 5.0 (NETWORK, LOW exploitability, Par...

SuSE9 Security Update : permissions (YOU Patch Number 10815)

It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...

Directory traversal

Directory traversal vulnerability in the Roland Breedveld Album comalbum component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php...

CVE-2009-3318

Directory traversal vulnerability in the Roland Breedveld Album comalbum component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php...

Changetrack 4.3-3 Privilege Escalation

TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA36756 VERIFY ADVISORY: http://secunia.com/advisories/36756/ DESCRIPTION: A vulnerability has been discovered in Changetrack, which can be exploited by malicious, local users to gain escalated privileges. The application...

Changetrack 4.3-3 Local Privilege Escalation Vulnerability

No description provided by source. TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA36756 VERIFY ADVISORY: http://secunia.com/advisories/36756/ DESCRIPTION: A vulnerability has been discovered in Changetrack, which can be exploited by malicious, local users to gain...

Changetrack 4.3-3 - Local Privilege Escalation

Changetrack 4.3-3 - Local Privilege Escalation TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA36756 VERIFY ADVISORY: http://secunia.com/advisories/36756/ DESCRIPTION: A vulnerability has been discovered in Changetrack, which can be exploited by malicious, local users...

Changetrack 4.3-3 Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ========================================================== Changetrack 4.3-3 Local Privilege Escalation Vulnerability ========================================================== TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA...

Changetrack 4.3-3 - Local Privilege Escalation

TITLE: Changetrack Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA36756 VERIFY ADVISORY: http://secunia.com/advisories/36756/ DESCRIPTION: A vulnerability has been discovered in Changetrack, which can be exploited by malicious, local users to gain escalated privileges. The application...

Browsable Web Directories

Multiple Nessus plugins identified directories on the web server that are browsable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid40984; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

DEBIAN-CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...