[ISecAuditors Advisories] Arbitrary remote file creation in 123flashchat server

============================================= INTERNET SECURITY AUDITORS ALERT 2006-001 - Original release date: January 09, 2006 - Last revised: January 13, 2006 - Discovered by: Jesus Olmos Gonzalez - Severity: 4/5 ============================================= I. VULNERABILITY...

CVE-2006-0223: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

Ubuntu 4.10 : vim vulnerabilities (USN-61-1)

Javier Fernandez-Sanguino Pena noticed that the auxillary scripts 'tcltags' and 'vimspell.sh' created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...

Mandrake Linux Security Advisory : graphviz (MDKSA-2005:188)

Javier Fernndez-Sanguino Pea discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3657: Undefined Security Weakness

The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object...

CVE-2003-1280: Undefined Security Weakness

Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. dot dot in multipart/form-data uploads...

fetchmail security announcement 2005-02 (CVE-2005-3088)

fetchmail-SA-2005-02: security announcement Topic: password exposure in fetchmailconf Author: Matthias Andree Version: 1.02 Announced: 2005-10-21 Type: insecure creation of file Impact: passwords are written to a world-readable file Danger: medium Credits: Thomas Wolff, Miloslav Trmac for pointin...

flexbackup default config insecure temporary file creation

flexbackup default config insecure temporary file creation Vendor: http://flexbackup.sourceforge.net/ Advisory: http://www.zataz.net/adviso/flexbackup-09192005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerabilities ared due to insecure temporary files...

Texinfo: Insecure temporary file creation

Background Texinfo is the official documentation system created by the GNU project. Description Frank Lichtenheld has discovered that the "sortoffline" function in texindex insecurely creates temporary files with predictable filenames. Impact A local attacker could create symbolic links in the...

Debian DSA-822-1 : gtkdiskfree - insecure temporary file creation

Eric Romang discovered that gtkdiskfree, a GNOME program that shows free and used space on filesystems, creates a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SA17025] storeBackup Insecure Temporary File Creation and Insecure Backup Root Permissions

TITLE: storeBackup Insecure Temporary File Creation and Insecure Backup Root Permissions SECUNIA ADVISORY ID: SA17025 VERIFY ADVISORY: http://secunia.com/advisories/17025/ CRITICAL: Less critical IMPACT: Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE:...

[SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 822-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...

Nokia Symbian 60 (Bluetooth Nickname) Remote Restart (update)

Exploit for hardware platform in category dos / poc ============================================================= Nokia Symbian 60 Bluetooth Nickname Remote Restart update ============================================================= / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit wi...

Nokia Symbian 60 - 'BlueTooth Nickname' Remote Restart (2)

/ Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth nickname, if any one search and find your nickname his mobile will restart . -...

GLSA-200508-19 : lm_sensors: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200508-19 lmsensors: Insecure temporary file creation Javier Fernandez-Sanguino Pena has discovered that lmsensors insecurely creates temporary files with predictable filenames when saving configurations. Impact : A local attacker...

WebWizXSS.txt

Bug : XSS in Web Wiz Forums cookie stealing Bug founded by : [email protected] Comment : I found this bug in +- 1 hour after some bitch asked me to help him, but he haven't do shit LOL Greets to : HaCkZaTaN, Johnnie Walker, Morinex, j0ker, Woopie, siLgi, bcuzZ. Big Fuck to : cobradrive, 0x1fe er...

KDE langen2kvtml symbolic links problem

Insecure temporary file creation...

OS2A-1001.txt

OS2A ePing Arbitrary File Creation/Command Execution Vulnerability OS2A ID: OS2A1001 Status Published: 08/04/2005 Updated : 08/05/2005 Patch Released Class: File Creation/Command Execution Severity: CRITICAL Overview: ePing is a ping utility plugin for e107, a PHP-based content management system...

CVE-2005-2353: Undefined Security Weakness

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...