[Full-disclosure] iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high-end databases. The DB2 Administration Server DAS implements the server compone...

CVE-2008-1687

The 1 maketemp and 2 mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename...

Microsoft Visual InterDev 6.0 (SP6) SLN File Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================================== Microsoft Visual InterDev 6.0 SP6 SLN File Local Buffer Overflow PoC ====================================================================== usage: exploit.py FileName import s...

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

usage: exploit.py FileName import sys print "--------------------------------------------------------------------------------" print ' PoC 2 Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

GLSA-200803-26 : Adobe Acrobat Reader: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-26 Adobe Acrobat Reader: Insecure temporary file creation SUSE reported that the 'acroread' wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact : A local...

Motorola Timbuktu Pro <= 8.6.5 File Deletion/Creation Exploit

No description provided by source. !/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro = 8.6.5 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590 Copyright...

Motorola Timbuktu Pro 8.6.5 - File DeletionCreation

Motorola Timbuktu Pro 8.6.5 - File DeletionCreation !/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro = 8.6.5 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory:...

GLSA-200803-11 : Vobcopy: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-11 Vobcopy: Insecure temporary file creation Joey Hess reported that vobcopy appends data to the file '/tmp/vobcopy.bla' in an insecure manner. Impact : A local attacker could exploit this vulnerability to conduct symlink...

CVE-2008-1191

Technical details for CVE-2008-1191 are not provided in the supplied documents. Please monitor for updates.

GLSA-200803-03 : Audacity: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-03 Audacity: Insecure temporary file creation Viktor Griph reported that the 'AudacityApp::OnInit' method in file src/AudacityApp.cpp does not handle temporary files properly. Impact : A local attacker could exploit this...

FreeBSD : claws-mail -- insecure temporary file creation (a59afa47-c930-11dc-810c-0016179b2dd5)

Nico Golde reports : A local attacker could exploit this vulnerability to conduct symlink attacks to overwrite files with the privileges of the user running Claws Mail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

wdcs-xss.txt

Aria-Security Team Persian Security Network httP://Aria-Security.Net --------------------------------------------- Shoutz: Aura, imm0rtal, Soot.Hackers, iM4N, A Special Thanks to my dear friend Mhp0rtal for his great help in order to find this vuln. Vendor: http://www.softwebsnepal.com Demo:...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

dBpowerAMP Audio Player 2 - '.m3u' Buffer Overflow (PoC)

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

wwrte-traverse.txt

WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz...

Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities ============================================================ AmnPardaz Security Research Team Title: Web Wiz Rich Tex...

Rejetto HTTP File Server (HFS) 1.5/2.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27423/info HFS HTTP File Server is prone to multiple security vulnerabilities, including cross-site scripting issues, an information-disclosure issue, an arbitrary file-creation issue, a denial-of-service issue, a username-spoofing issue, and a...

Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities

WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz...

Web Wiz Rich Text Editor 4.0 Multiple Remote Vulnerabilities

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is...