GLSA-201110-10 : Wget: User-assisted file creation or overwrite

The remote host is affected by the vulnerability described in GLSA-201110-10 Wget: User-assisted file creation or overwrite It was discovered that Wget was unsafely trusting server-provided filenames. This allowed attackers to overwrite or create files on the user's system by sending a redirect...

CentOS Update for bash CESA-2011:1073 centos5 i386

Check for the Version of bash OpenVAS Vulnerability Test CentOS Update for bash CESA-2011:1073 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for bash CESA-2011:1073 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Moyea FLV Player(.flv)Local Crash Poc

Exploit for windows platform in category dos / poc !/usr/bin/python print "" print " Name: Moyea FLV Player.flvLocal Crash Poc " print " Author: Angel Injection " print " Email: email protected " print " home page: http://club-h.co.cc http://sec-krb.org " print "" try : junk = "\x41" 10000 f =...

CentOS Update for xmlsec1 CESA-2011:0486 centos5 i386

Check for the Version of xmlsec1 OpenVAS Vulnerability Test CentOS Update for xmlsec1 CESA-2011:0486 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

SuSE 11.1 Security Update : libwebkit (SAT Patch Number 4917)

This update of libwebkit fixes : - XSLT file creation allowed webpages evaluating XSLT code to create files. CVE-2011-1774 - ZDI-11-139 Webkit Anonymous Frame remote code exec %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CVE-2011-1774: Improper Input Validation

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425...

Word List Builder Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham...

CVE-2011-2202: Undefined Security Weakness

The rfc1867posthandler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request...

CVE-2011-2473

CVE-2011-2473 concerns do_dump_data in utils/opcontrol of OProfile (0.9.6 and earlier). The flaw allows local users to create or overwrite arbitrary files via a crafted --session-dir argument combined with a symlink attack on the opd_pipe file, and is described as a different vulnerability from C...

PT-2011-3896

Name of the Vulnerable Software and Affected Versions OProfile versions 0.9.6 and earlier Description The issue is related to the do dump data function in utils/opcontrol, which might allow local users to create or overwrite arbitrary files. This can be achieved via a crafted --session-dir argume...

CVE-2011-2473: Improper Link Resolution Before File Access

The dodumpdata function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opdpipe file, a different vulnerability than CVE-2011-1760...

HP Intelligent Management Center Multiple Vulnerabilities

The version of HP Intelligent Management Center running on the remote host contains a number of vulnerabilities that can be exploited remotely without authentication, including code execution and arbitrary file creation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"xmlpars...

HP Intelligent Management Center TFTP Multiple Vulnerabilities

A TFTP server belonging to HP Intelligent Management Center is running on the remote host. This is a collection point for any HP Intelligent Management Center clients on the network. The installed version of this server contains a number of vulnerabilities, including code execution and arbitrary...

Forticlient SSL VPN Symlink Overwrite

forticlientsslvpn suffers from an insecure lock file creation issue. Upon starting the forticlientsslvpn, the file 'forticlientsslvpn.lock' is created under the /tmp directory with octal permissions 0666. The client does not first check if this file exists, or if it is even currently owned by the...

HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities

According to its version number, the HP Intelligent Management Center install on the remote host is potentially affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability exists in the 'img.exe' component. CVE-2011-1848 - A flaw exists in the 'tftpserver.exe' component...

HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities

Binary data 5927.prm...

ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability

ZDI-11-161: HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-161 May 10, 2011 -- CVE ID: CVE-2011-1849 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

kernel: inotify memory leak

Memory leak in the inotifyinit1 function in fs/notify/inotify/inotifyuser.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service memory consumption via vectors involving failed attempts to create files...

xmlsec1: arbitrary file creation when verifying signatures

xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...