Debian Security Advisory DSA 292-2 (mime-support)

The remote host is missing an update to mime-support announced via advisory DSA 292-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Debian: Security Advisory (DSA-603-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Visual InterDev 6.0 (SP6) .sln File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================================== Microsoft Visual InterDev 6.0 SP6 .sln File Local Buffer Overflow Exploit =========================================================================== usage: exploit....

Microsoft Visual InterDev 6.0 SP6 - .sln Local Buffer Overflow

Microsoft Visual InterDev 6.0 SP6 - .sln Local Buffer Overflow usage: exploit.py FileName import sys print "------------------------------------------------------------------------" print ' Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail...

GLSA-200801-03 : Claws Mail: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200801-03 Claws Mail: Insecure temporary file creation Nico Golde from Debian reported that the sylprint.pl script that is part of the Claws Mail tools creates temporary files in an insecure manner. Impact : A local attacker could...

Gallery 2.2.4之前版本多个远程安全漏洞

BUGTRAQ ID: 27035 Gallery是基于Web的开源相册管理器。 Gallery的2.2.4之前版本存在多个安全漏洞，允许恶意用户泄露敏感信息、执行跨站脚本攻击、绕过安全限制或入侵有漏洞的系统。 1 Publish XP模块中的漏洞可能导致未经正确的授权便创建和上传文件。 2 URL重写模块中的管理员控制器中的漏洞可能允许包含本地文件。 3 core和add-item模块中没有正确地过滤通过文件名所传送的输入，导致在用户浏览器会话中执行任意HTML和脚本代码。 4 Core/MIME模块中没有对上传文件的扩展名执行正确的检查。 5 Gallery...

Lookup: Insecure temporary file creation

Background Lookup is a search interface to books and dictionnaries for Emacs. Description Tatsuya Kinoshita reported that the ndeb-binary function does not handle temporay files correctly. Impact A local attacker could use a symlink attack to overwrite files with the privileges of the user runnin...

GLSA-200712-01 : Hugin: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200712-01 Hugin: Insecure temporary file creation Suse Linux reported that Hugin creates the 'hugindebugoptimresults.txt' temporary file in an insecure manner. Impact : A local attacker could exploit this vulnerability with a...

[ GLSA 200712-01 ] Hugin: Insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200712-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

claws-mail -- insecure temporary file creation

Nico Golde reports: A local attacker could exploit this vulnerability to conduct symlink attacks to overwrite files with the privileges of the user running Claws Mail...

Feynmf: Insecure temporary file creation

Background Feynmf is a combined LaTeX and Metafont package for easy drawing of professional quality Feynman and maybe other diagrams. Description Kevin B. McCarty discovered that the feynmf.pl script creates a temporary "properly list" file at the location "$TMPDIR/feynmf$PID.pl", where $PID is t...

CVE-2007-4701

WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5927

CVE-2007-5927 (OpenBase) affects OpenBase 10.0.5 and earlier. A directory traversal issue in the GlobalLog stored procedure allows remote authenticated users to create files with arbitrary contents by supplying a leading .. sequence as the first argument. The issue is noted to be exploitable in c...

Scribe <= 0.2 Remote PHP Code Execution Vulnerability

Exploit for unknown platform in category web applications ===================================================== Scribe | |||| /| / / --------------------------------------------------------------- Scribe YOURPHPCODE" br...

GLSA-200710-22 : TRAMP: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200710-22 TRAMP: Insecure temporary file creation Stefan Monnier discovered that the tramp-make-tramp-temp-file function creates temporary files in an insecure manner. Impact : A local attacker could create symbolic links in the...

GLSA-200710-10 : SKK Tools: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200710-10 SKK Tools: Insecure temporary file creation skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact : A local attacker could create...

SKK Tools: Insecure temporary file creation

Background SKK is a Japanese input method for Emacs. Description skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact A local attacker could create symbolic links in the directory where the temporary files ar...

CVE-2007-5270

CVE-2007-5270 affects Drupal via the Boost module prior to 4.7.x-1.0 and 5.x prior to 5.x-1.0. The vulnerability allows remote attackers to create or overwrite arbitrary files and perform cross-site scripting (XSS) through unspecified vectors. The available connected documents confirm the affecte...

FreeBSD : id3lib -- insecure temporary file creation (15ec9123-7061-11dc-b372-001921ab2fa4)

Debian Bug report log reports : When tagging file $foo, a temporary copy of the file is created, and for some reason, libid3 doesn't use mkstemp but just creates $foo.XXXXXX literally, without any checking. This would silently truncate and overwrite an existing $foo.XXXXXX. %NASLMINLEVEL 70300 C...