Fedora 16 : systemd-37-15.fc16 (2012-2557)

This systemd update adds several fixes : - logind created files under /run/user/ in an insecure manner. A local attacker could create a symlink inside arbitrary directories CVE-2012-0871. - permissions of PrivateTmp directories RHBZ790522 - timedated did not run without ntp installed RHBZ790260 -...

Debian ‘x11-common’ Init script insecure temporary file creation vulnerability-vulnerability warning-the black bar safety net

Vulnerability causes Design errors The level of danger Low The impact of the system Debian x11-common 1:7.5+8 Not affected system Hazards A local attacker could exploit the vulnerability could elevate privileges or destruction of the system. Attack required conditions The attacker must have acces...

PT-2012-3053

Name of the Vulnerable Software and Affected Versions 2X ApplicationServer version 10.1 Build 1224 Description The issue concerns an insecure method vulnerability in the TuxScripting.dll component of the TuxSystem ActiveX control. This vulnerability allows remote attackers to create or overwrite...

CVE-2012-1065: Undefined Security Weakness

Insecure method vulnerability in TuxScripting.dll in the TuxSystem ActiveX control in 2X ApplicationServer 10.1 Build 1224 allows remote attackers to create or overwrite arbitrary files via the ExportSettings method...

php: XSLT file writing vulnerability(CVE-2012-0057)

No description provided by source. Description: ------------ Current version of PHP5 allow creation of arbitrary files when processing XSLT content. This was tested on the following releases : - PHP 5.3.2-1ubuntu4.7 with Suhosin-Patch cli built: Jan 12 2011 18:36:08 - PHP 5.3.6 cli built: Apr 1...

CVE-2012-0057

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension...

CVE-2012-0057

CVE-2012-0057 affects PHP up to version 5.3.8 (prior to 5.3.9), where improper libxslt security settings allow remote attackers to create arbitrary files via a crafted XSLT stylesheet using the libxslt output extension. The connected advisories confirm this vulnerability across multiple distribut...

CVE-2012-0057: Undefined Security Weakness

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension...

CVE-2012-0057

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension...

PT-2012-1218

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.9 Description The issue is related to improper security settings in the libxslt library of the PHP interpreter, which is associated with privilege management errors. This allows a remote attacker to create arbitrary...

Oracle AutoVue AutoVueX ActiveX Control Export3DBom Remote File Creation

An arbitrary file creation vulnerability has been reported in Oracle AutoVue ActiveX control...

Oracle AutoVue AutoVueX ActiveX Control ExportEdaBom Remote File Creation

An arbitrary file creation vulnerability has been reported in Oracle AutoVue ActiveX control...

MySQL < 4.1.2 Insecure Temporary File Creation

The version of MySQL installed on the remote host is earlier than 4.1.2 and reportedly allows a local user to overwrite files via a symlink attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17799; scriptversion"1.4"; scriptcvsdate"Date: 2018/07/16 14:09:12";...

CVE-2012-0393

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object...

Design/Logic Flaw

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object...

CVE-2012-0393

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object...

PT-2012-1798

Name of the Vulnerable Software and Affected Versions Siemens Tecnomatix FactoryLink versions 6.6.1 through 8.0.2.54 Description The issue allows remote attackers to create or overwrite arbitrary files. This is achieved via the save method of an unspecified ActiveX control in ActBar.ocx...

CVE-2012-0393: Undefined Security Weakness

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object...

CVE-2011-4056: Undefined Security Weakness

An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 aka 6.6 SP1, 7.5.217 aka 7.5 SP2, and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method...

CVE-2011-4166: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...