3457 matches found
CVE-2007-1954
Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...
CVE-2007-1954
CVE-2007-1954 relates to multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 . The issue allows remote attackers to create files in arbitrary directories by supplying a path with a leading “..” inside archive formats (including .gz, .jar, .rar, .tar.gz, .zip, and .tar). The...
CVE-2007-1954
Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...
CVE-2007-0728
CVE-2007-0728 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.8. It describes an insecure file-creation flaw during USB printer initialization, allowing local users to create or overwrite arbitrary files. The available source summarizes impact as local access with partial confidentiality/integr...
McAfee Virex Virus Scan for Mac OS X symbolic links problem and protection bypass
Weak permissions and symbolic links problem on /Library/Application/Sypport/Virex/VShieldExecute.txt file creation...
IBM DB2 database multiple security vulnerabilities
Multiple privilege escalations, file creation...
iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability
IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability iDefense Security Advisory 02.22.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 22, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for higher end...
HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00862809 Version: 1 HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation NOTICE: The information in this Security Bulletin should be acted upon as soon a...
HP-UX SLSd unauthorized access
It's possible to create any file with attacker-supplied data...
Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC
No description provided by source. /usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...
Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC
Exploit for unknown platform in category dos / poc ======================================================= Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC ======================================================= /usr/bin/ python print...
Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow (PoC)
/usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site: http://shinnai.altervista.org" print...
Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC
No description provided by source. !/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...
Fedora Core 6 : mutt-1.4.2.2-3.fc6 (2006-1063)
Tue Oct 24 2006 Miroslav Lichvar 5:1.4.2.2-3 - fix insecure temp file creation on NFS 211085, CVE-2006-5297 - Thu Aug 3 2006 Miroslav Lichvar 5:1.4.2.2-2 - fix a SASL authentication bug 199591 - Mon Jul 17 2006 Miroslav Lichvar 5:1.4.2.2-1 - update to 1.4.2.2 - fix directories in manual.txt...
Fedora Core 5 : mutt-1.4.2.1-7.fc5 (2006-1061)
Tue Oct 24 2006 Miroslav Lichvar 5:1.4.2.1-7.fc5 - fix insecure temp file creation on NFS 211085, CVE-2006-5297 - Thu Jun 29 2006 Miroslav Lichvar 5:1.4.2.1-6.3.fc5 - fix a buffer overflow when processing IMAP namespace 197152, CVE-2006-3242 Note that Tenable Network Security has extracted the...
Analysis of black anti-CD QQ black hand-vulnerability warning-the black bar safety net
Look at the hack line of Defense for the official announcement, 6 issues disc this month I promote the column, the moving network vulnerabilities using the animation included with the tool will make the antivirus Alarm, tips for Trojan-PSW. Win32. QQShou. ed. A thought, my old magic computer blac...
Sun Solaris ld.so多个本地安全漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的ld.so程序库实现上存在多个安全漏洞，本地攻击者可能利用这些漏洞提升自己的权限。 ld.so程序库对LANG环境变量值没有做充分的检查过滤即做为创建文件路径的一部分，本地攻击者可以在变量值中插入“../”目录遍历串，从而在系统上的任意位置创建文件。 ld.so程序库的doprf函数实现上存在一个栈溢出漏洞，本地攻击者可以利用此漏洞通过运行一个setuid程序来提升权限。 Sun Solaris 9.0 Sun Solaris 8.0 Sun Solaris 10.0 Sun Solaris 8.0 x8...
06-alternC-095.txt
ground418 security advisory Date: 28-11-2006 Subject: Multiple Vulnerabilities in AlternC version 0.9.5 and below. Author: Vincent Audet Ménard Original File: http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt Related Files: http://dev.alternc.org/trac/alternc/changeset/1737...
CVE-2006-6259
Multiple directory traversal vulnerabilities in a class/functions.php and b class/mbro.php in AlternC 0.9.5 and earlier allow remote attackers to 1 create arbitrary files and directories via a .. dot dot in the "create name" field and 2 read arbitrary files via a .. dot dot in the "web root" fiel...
simple file manager 0.24a - Multiple Vulnerabilities
/\ | flame vrs Simple File Manager | | http://onedotoh.sourceforge.net/ | | Various Vulnerbilities Including: | / /+++++++++++++++++++++++++++++++++++++++++++\ | Using the scripts supplied by the webapp: | | Reading of Arbitrary files | | Deletion of Arbitrary files | | Modification of Arbitrary...