4364 matches found
CVE-2005-0711
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack...
CVE-2005-0329
Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. dot dot sequences...
CVE-2005-0225
firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack...
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
GLSA-200504-25 : Rootkit Hunter: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200504-25 Rootkit Hunter: Insecure temporary file creation Sune Kloppenborg Jeppesen and Tavis Ormandy of the Gentoo Linux Security Team have reported that the checkupdate.sh script and the main rkhunter script insecurely creates...
[SA14899] Pine rpdump File Creation Race Condition Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Pine rpdump File Creation Race Condition Vulnerability...
CVE-2005-0387: Undefined Security Weakness
remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
Linux Kernel 2.6.10 - Local Denial of Service
/ Removed ='s at the bottom /str0ke / / linux kernel include include include include include include include include include include include define SIZE 0x80004242 syscall5int, llseek, uint, fd, ulong, hi, ulong, lo, lofft , res, uint, wh; void createfile int nm1, filev; char vname424;...
Linux Kernel 2.6.10 - Local Denial of Service
Linux Kernel 2.6.10 - Local Denial of Service / Removed ='s at the bottom /str0ke / / linux kernel include include include include include include include include include include include define SIZE 0x80004242 syscall5int, llseek, uint, fd, ulong, hi, ulong, lo, lofft , res, uint, wh; void...
CVE-2003-1124: Undefined Security Weakness
Unknown vulnerability in Sun Management Center SunMC 2.1.1, 3.0, and 3.0 Revenue Release RR, when installed and run by root, allows local users to create or modify arbitrary files...
MySQL 4.x - CREATE FUNCTION mysql.func Table Arbitrary Library Injection
source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary file-creation vulnerability. Reports indicate that an attacker with...
MySQL 4.x - CREATE FUNCTION mysql.func Table Arbitrary Library Injection
MySQL 4.x - CREATE FUNCTION mysql.func Table Arbitrary Library Injection source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure...
MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution
MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary...
[VulnWatch] Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation
Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation Author: Stefano Di Paola Vulnerable: Mysql = 4.0.23, 4.1.10 Type of Vulnerability: Local insecure temporary file creation Tested On : Mandrake 10.1 /Debian Sarge Vendor Status: Notified on March, 2nd 2005 --...
Debian DSA-691-1 : abuse - several vulnerabilities
Several vulnerabilities have been discovered in abuse, the SDL port of the Abuse action game. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0098 Erik Sjolund discovered several buffer overflows in the command line handling, which could lead to the...
CVE-2005-0099: Undefined Security Weakness
The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...
iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal
Computer Associates License Client PUTOLF Directory Traversal iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=212&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products to registe...
CVE-2005-0583
Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...
CVE-2005-0583: Undefined Security Weakness
Directory traversal vulnerability in Computer Associates CA License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. dot dot sequences in a PUTOLF request...