GLSA-200801-03 : Claws Mail: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200801-03 Claws Mail: Insecure temporary file creation Nico Golde from Debian reported that the sylprint.pl script that is part of the Claws Mail tools creates temporary files in an insecure manner. Impact : A local attacker could...

Gallery 2.2.4之前版本多个远程安全漏洞

BUGTRAQ ID: 27035 Gallery是基于Web的开源相册管理器。 Gallery的2.2.4之前版本存在多个安全漏洞，允许恶意用户泄露敏感信息、执行跨站脚本攻击、绕过安全限制或入侵有漏洞的系统。 1 Publish XP模块中的漏洞可能导致未经正确的授权便创建和上传文件。 2 URL重写模块中的管理员控制器中的漏洞可能允许包含本地文件。 3 core和add-item模块中没有正确地过滤通过文件名所传送的输入，导致在用户浏览器会话中执行任意HTML和脚本代码。 4 Core/MIME模块中没有对上传文件的扩展名执行正确的检查。 5 Gallery...

CVE-2007-6397: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to 1 create arbitrary files via a .. dot dot in the username parameter when registering a user account, and 2 read arbitrary PHP files via a .. dot dot in a the topic parameter in a...

CVE-2007-6378: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the filename parameter...

Lookup: Insecure temporary file creation

Background Lookup is a search interface to books and dictionnaries for Emacs. Description Tatsuya Kinoshita reported that the ndeb-binary function does not handle temporay files correctly. Impact A local attacker could use a symlink attack to overwrite files with the privileges of the user runnin...

GLSA-200712-01 : Hugin: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200712-01 Hugin: Insecure temporary file creation Suse Linux reported that Hugin creates the 'hugindebugoptimresults.txt' temporary file in an insecure manner. Impact : A local attacker could exploit this vulnerability with a...

[ GLSA 200712-01 ] Hugin: Insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200712-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

claws-mail -- insecure temporary file creation

Nico Golde reports: A local attacker could exploit this vulnerability to conduct symlink attacks to overwrite files with the privileges of the user running Claws Mail...

Feynmf: Insecure temporary file creation

Background Feynmf is a combined LaTeX and Metafont package for easy drawing of professional quality Feynman and maybe other diagrams. Description Kevin B. McCarty discovered that the feynmf.pl script creates a temporary "properly list" file at the location "$TMPDIR/feynmf$PID.pl", where $PID is t...

CVE-2007-4701

WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file...

CVE-2007-5927

CVE-2007-5927 (OpenBase) affects OpenBase 10.0.5 and earlier. A directory traversal issue in the GlobalLog stored procedure allows remote authenticated users to create files with arbitrary contents by supplying a leading .. sequence as the first argument. The issue is noted to be exploitable in c...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5927: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5823: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...

CVE-2007-5826: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than...

CVE-2007-5804: Undefined Security Weakness

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable world writability of this file, by using the file's name as the argument...

CVE-2007-5805: Improper Link Resolution Before File Access

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...

Scribe <= 0.2 Remote PHP Code Execution Vulnerability

Exploit for unknown platform in category web applications ===================================================== Scribe | |||| /| / / --------------------------------------------------------------- Scribe YOURPHPCODE" br...

CVE-2007-5718: Improper Link Resolution Before File Access

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...

GLSA-200710-22 : TRAMP: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200710-22 TRAMP: Insecure temporary file creation Stefan Monnier discovered that the tramp-make-tramp-temp-file function creates temporary files in an insecure manner. Impact : A local attacker could create symbolic links in the...