CVE-2004-1673

accountsettingsadd.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter...

CVE-2004-1679: Undefined Security Weakness

Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ triple dot in the 1 CWD, 2 STOR, or 3 RETR commands...

CVE-2004-1610: Undefined Security Weakness

SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the 1 vMME.AttachmentPath or 2 vMME.LibraryPath variables...

CVE-2004-1673: Undefined Security Weakness

accountsettingsadd.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter...

GLSA-200501-33 : MySQL: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200501-33 MySQL: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the 'mysqlaccess' script creates temporary files in world-writeable directories with predictab...

GLSA-200501-43 : f2c: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200501-43 f2c: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that f2c creates temporary files in world-writeable directories with predictable names. Impact : A local...

Sun Java Plugin may create temporary files with predictable names

Overview The Sun Java Plugin may allow remote users to create files with arbitrary content in a specific location. Description From the Sun Java Plugin page:Java Plug-in technology, included as part of the Java 2 Runtime Environment, Standard Edition JRE, establishes a connection between popular...

CVE-2005-0331

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... triple dot in the filename of the ZIP file...

CVE-2005-0329: Undefined Security Weakness

Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. dot dot sequences...

CVE-2005-0331: Undefined Security Weakness

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... triple dot in the filename of the ZIP file...

CVE-2003-1056: Undefined Security Weakness

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-0155

The CVE-2005-0155 entry concerns the Perl PerlIO/ setuid wrapper (sperl) in Perl 5.8.0. The vulnerability arises when PERLIO_DEBUG is set, allowing a local user to cause the sperl process to create arbitrary files (or append debugging information), effectively giving root privileges through a loc...

Setuid perl PerlIO_Debug() root owned file creation

No description provided by source. / Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU KNOW WHAT YOU ARE DOING WARNING...

Setuid perl - 'PerlIO_Debug()' Root Owned File Creation Privilege Escalation

/ Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU KNOW WHAT YOU ARE DOING WARNING overwriting /etc/ld.so.preload can severl...

Setuid perl PerlIO_Debug() root owned file creation

Exploit for linux platform in category local exploits =================================================== Setuid perl PerlIODebug root owned file creation =================================================== / Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity...

CVE-2005-0155: Undefined Security Weakness

The PerlIO implementation in Perl 5.8.0, when installed with setuid support sperl, allows local users to create arbitrary files via the PERLIODEBUG variable...

CVE-2005-0225

firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack...

CVE-2004-1387: Undefined Security Weakness

The checkforensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

CVE-2005-0214: Undefined Security Weakness

Directory traversal vulnerability in Simple PHP Blog SPHPBlog 0.3.7c allows remote attackers to read or create arbitrary files via a .. dot dot in the entry parameter...

CVE-2005-0071

Vulnerability CVE-2005-0071 affects VDR prior to 1.2.6, where file creation is insecure, enabling a local attacker to overwrite arbitrary files. The issue is documented across multiple feeds (NVD, OSV, Debian GLSA, Gentoo GLSA) with exploitation potential at local level and remediation via upgrad...