IBM AIX 4.2.1 - '/usr/bin/portmir' Local Buffer Overflow / Insecure Temporary File Creation

/ source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowed malicious users to obtain root privileges. Secondly it wrote it's log files to a...

PT-1997-1033 · Bsd · Lpd

Name of the Vulnerable Software and Affected Versions: lpd affected versions not specified Description: The issue concerns file creation and deletion, as well as remote execution, in the BSD line printer daemon lpd. Recommendations: At the moment, there is no information about a newer version tha...

AIX 3.x - bugfiler Arbitrary File Creation

AIX 3.x - bugfiler Arbitrary File Creation source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified b...

AIX 3.x - bugfiler Arbitrary File Creation

source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified by the user invoking the program example:...

Microsoft IIS 3.0 - 'newdsn.exe' File Creation

source: https://www.securityfocus.com/bid/1818/info Microsoft IIS 3.0 came with a sample program, newdsn.exe, installed by default in the directory wwwroot/scripts/tools/. Execution of this program with a properly submitted URL could allow for remote file creation. The file created is a Microsoft...

Microsoft IIS 3.0 - newdsn.exe File Creation

Microsoft IIS 3.0 - newdsn.exe File Creation source: https://www.securityfocus.com/bid/1818/info Microsoft IIS 3.0 came with a sample program, newdsn.exe, installed by default in the directory wwwroot/scripts/tools/. Execution of this program with a properly submitted URL could allow for remote...

PT-1997-1019 · Sgi · Irix Login Program

Name of the Vulnerable Software and Affected Versions: IRIX login program affected versions not specified Description: The issue concerns the IRIX login program, where a nonzero LOCKOUT parameter allows unauthorized creation or damage to files. Recommendations: At the moment, there is no...

CVE-1999-0049

Csetup under IRIX allows arbitrary file creation or overwriting...

PT-1997-1029 · Sgi · Csetup

Name of the Vulnerable Software and Affected Versions: Csetup under IRIX affected versions not specified Description: The issue allows for arbitrary file creation or overwriting. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

PT-1997-1030 · Globetrotter +1 · Flexlm Licensemanager +1

Name of the Vulnerable Software and Affected Versions: IRIX versions 4.0 through 5.0 Description: The issue allows for arbitrary file creation and program execution using FLEXlm LicenseManager. Recommendations: For IRIX versions 4.0 through 5.0, consider disabling the FLEXlm LicenseManager until ...

CVE-1999-1572

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

CVE-1999-0325

vheumnt program in HP-UX allows local users to create root files through symlinks...

Security Update for the Diagnostic Hub Standard Collector elevation of privilege vulnerability in Visual Studio 2015 Update 3 (KB4489639)

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations...