CVE-2008-2863

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

CVE-2008-2863

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

Code injection

Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors...

CVE-2008-1660

Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors...

[SECURITY] Fedora 8 Update: kde-filesystem-4-14.fc8

This package provides some directories that are required/used by KDE...

[SECURITY] Fedora 7 Update: kde-filesystem-4-14.fc7

This package provides some directories that are required/used by KDE...

Denial of service

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

CVE-2008-1796 affects Comix 3.6.4 and earlier, where temporary directories are created with predictable names, enabling a local user to cause a denial of service. The issue is described in multiple sources (e.g., GLSA 200804-29) as a local DoS due to predictable directory names. Affected package ...

CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

Removed by vendor...

Design/Logic Flaw

Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges...

CVE-2008-0055

Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges...

CVE-2008-0055

Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges...

CVE-2008-0055

CVE-2008-0055 affects Apple Mac OS X 10.4.11. The vulnerability occurs when NSFileManager copies files recursively: it creates world-writable directories and then narrows permissions later, enabling local users to modify copied files and potentially cause a denial of service and privilege escalat...

CVE-2008-1199

Dovecot before 1.0.11, when configured to use mailextragroups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

Design/Logic Flaw

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...