3457 matches found
CVE-2004-1679
Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ triple dot in the 1 CWD, 2 STOR, or 3 RETR commands...
CVE-2004-1673
accountsettingsadd.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter...
GLSA-200501-33 : MySQL: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200501-33 MySQL: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the 'mysqlaccess' script creates temporary files in world-writeable directories with predictab...
GLSA-200501-43 : f2c: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200501-43 f2c: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that f2c creates temporary files in world-writeable directories with predictable names. Impact : A local...
Sun Java Plugin may create temporary files with predictable names
Overview The Sun Java Plugin may allow remote users to create files with arbitrary content in a specific location. Description From the Sun Java Plugin page:Java Plug-in technology, included as part of the Java 2 Runtime Environment, Standard Edition JRE, establishes a connection between popular...
CVE-2005-0331
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... triple dot in the filename of the ZIP file...
CVE-2005-0155
The CVE-2005-0155 entry concerns the Perl PerlIO/ setuid wrapper (sperl) in Perl 5.8.0. The vulnerability arises when PERLIO_DEBUG is set, allowing a local user to cause the sperl process to create arbitrary files (or append debugging information), effectively giving root privileges through a loc...
Setuid perl PerlIO_Debug() root owned file creation
No description provided by source. / Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU KNOW WHAT YOU ARE DOING WARNING...
Setuid perl - 'PerlIO_Debug()' Root Owned File Creation Privilege Escalation
/ Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU KNOW WHAT YOU ARE DOING WARNING overwriting /etc/ld.so.preload can severl...
Setuid perl PerlIO_Debug() root owned file creation
Exploit for linux platform in category local exploits =================================================== Setuid perl PerlIODebug root owned file creation =================================================== / Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity...
CVE-2005-0225
firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack...
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
CVE-2005-0071
Vulnerability CVE-2005-0071 affects VDR prior to 1.2.6, where file creation is insecure, enabling a local attacker to overwrite arbitrary files. The issue is documented across multiple feeds (NVD, OSV, Debian GLSA, Gentoo GLSA) with exploitation potential at local level and remediation via upgrad...
IceWarp Web Mail 5.3 - login.html Username Cross-Site Scripting
IceWarp Web Mail 5.3 - login.html Username Cross-Site Scripting source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML...
IceWarp Web Mail 5.3 - accountsettings_add.html?accountid Cross-Site Scripting
IceWarp Web Mail 5.3 - accountsettingsadd.html?accountid Cross-Site Scripting source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting...
IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML injection vulnerabilities affect the vulnerable software. The produc...
IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML injection vulnerabilities affect the vulnerable software. The produc...
p5-DBI -- insecure temporary file creation vulnerability
Javier Fernández-Sanguino Peña reports: The DBI library, the Perl5 database interface, creates a temporary PID file in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by the person executing the parts of the library...
