Gentoo Security Advisory GLSA 200511-16 (GNUMP3d)

The remote host is missing updates announced in advisory GLSA 200511-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

BurnAware - NMSDVDXU ActiveX Arbitrary File CreationExecution

BurnAware - NMSDVDXU ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1,...

Gentoo Security Advisory GLSA 200710-10 (skktools)

The remote host is missing updates announced in advisory GLSA 200710-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit

No description provided by source. ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID:...

BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution

Exploit for unknown platform in category remote exploits =================================================================== BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution ===================================================================...

Gentoo Security Advisory GLSA 200407-01 (esearch)

The remote host is missing updates announced in advisory GLSA 200407-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BurnAware - NMSDVDXU ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1, "calc.exe", 1...

chilkat-exec.txt

----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...

Chilkat XML - ActiveX Arbitrary File CreationExecution

Chilkat XML - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42...

Chilkat XML - ActiveX Arbitrary File Creation/Execution

----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...

R: Insecure temporary file creation

Background R is a GPL licensed implementation of S, a language and environment for statistical computing and graphics. Description Dmitry E. Oboukhov reported that the "javareconf" script uses temporary files in an insecure manner. Impact A local attacker could exploit this vulnerability to...

IBM AIX 'swcons'不安全文件建立漏洞

BUGTRAQ ID: 30999 CNCAN ID：CNCAN-2008090411 IBM AIX是一款商业性质的操作系统。 IBM AIX 'swcons'不安全建立临时文件，本地攻击者可以利用漏洞以ROOT用户建立任意文件，可导致获得超级用户权限。 要运行'swcons'工具，必须本地用户属于'system'组成员。 IBM AIX 6.1 IBM AIX 5.3 IBM AIX 5.2 可参考如下补丁程序： IBM AIX 6.1 IBM IZ18341 http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 IBM...

CVE-2008-4018: Undefined Security Weakness

swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exis...

GLSA-200809-08 : Amarok: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200809-08 Amarok: Insecure temporary file creation Dwayne Litzenberger reported that the MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp uses the albuminfo.xml temporary file in an insecure...

CVE-2008-3855

CVE-2008-3855 describes an unspecified local privilege-escalation vulnerability in IBM DB2 Universal Database 9.1’s DB2 Administration Server (DAS) Core DAS before Fixpak 5. It is a FILE CREATION vulnerability that can allow escalation by manipulating files used during initialization; some source...

CVE-2008-3855: Undefined Security Weakness

Unspecified vulnerability in the DB2 Administration Server DAS in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664...

Kyocera Mita Scanner File Utility 3.3.0.1 - File Transfer Directory Traversal

Kyocera Mita Scanner File Utility 3.3.0.1 - File Transfer Directory Traversal source: https://www.securityfocus.com/bid/30855/info Kyocera Mita Scanner File Utility is prone to a directory-traversal vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit...

Java Web Start, arbitrary file creation (6703909)

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909...

Java Web Start, arbitrary file creation (6703909)

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909...

Java Web Start arbitrary file creation/deletion file with user permissions (6704077)

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.218 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077...