4364 matches found
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
CVE-2005-0069: Undefined Security Weakness
The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...
CVE-2005-0071: Undefined Security Weakness
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files...
IceWarp Web Mail 5.3 - accountsettings_add.html?accountid Cross-Site Scripting
IceWarp Web Mail 5.3 - accountsettingsadd.html?accountid Cross-Site Scripting source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting...
IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML injection vulnerabilities affect the vulnerable software. The produc...
IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML injection vulnerabilities affect the vulnerable software. The produc...
IceWarp Web Mail 5.3 - login.html Username Cross-Site Scripting
IceWarp Web Mail 5.3 - login.html Username Cross-Site Scripting source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML...
p5-DBI -- insecure temporary file creation vulnerability
Javier Fernández-Sanguino Peña reports: The DBI library, the Perl5 database interface, creates a temporary PID file in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by the person executing the parts of the library...
FireHOL Linux firewall builder symbolic links problem
Symbolic links problem on temporary files creation...
newsgrab -- insecure file and directory creation
The newsgrab script uses insecure permissions during the creation of the local output directory and downloaded files. After a file is created, permissions on it are set using the mode value of the newsgroup posting. This can potentially be a problem when the mode is not restrictive enough. In...
bmv PostScript viewer symbolic links problem
Symbolic links problem on temporary files creation...
Mod_dosevasive symlink and race vulnerability
LSS Security Advisory LSS-2005-01-01 http://security.lss.hr --- Title : Moddosevasive symlink and race vulnerability Advisory ID : LSS-2005-01-4 Date : January 1th, 2005 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-01 Impact : Arbitrary file creation Risk level ...
Debian DSA-633-1 : bmv - insecure temporary file
Peter Samuelson, upstream maintainer of bmv, a PostScript viewer for SVGAlib, discovered that temporary files are created in an insecure fashion. A malicious local user could cause arbitrary files to be overwritten by a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SA13758] iproute2 netbug Script Insecure Temporary File Creation
TITLE: iproute2 netbug Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13758 VERIFY ADVISORY: http://secunia.com/advisories/13758/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: iproute2 2.x http://secunia.com/product/4495/ DESCRIPTION: Javier...
IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I)
NGSSoftware Insight Security Research Advisory Name: IBM DB2 XML functions file creation vulnerabilities Systems Affected: DB2 8.1 Severity: High risk from remote Vendor URL: http://www.ibm.com/ Author: David Litchfield david at ngssoftware.com Relates to:...
[SA13693] GRASS Multiple Scripts Insecure Temporary File Creation
TITLE: GRASS Multiple Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13693 VERIFY ADVISORY: http://secunia.com/advisories/13693/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GRASS 5.7.x http://secunia.com/product/4471/ DESCRIPTION: Javier...
[SA13635] Rpm Finder "web()" Buffer Overflow and Insecure File Creation
TITLE: Rpm Finder "web" Buffer Overflow and Insecure File Creation SECUNIA ADVISORY ID: SA13635 VERIFY ADVISORY: http://secunia.com/advisories/13635/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Rosiello Rpm Finder rpf 1.x...
[SA13640] LPRng "lprng_certs.sh" Script Insecure Temporary File Creation
TITLE: LPRng "lprngcerts.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13640 VERIFY ADVISORY: http://secunia.com/advisories/13640/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: LPRng 3.x http://secunia.com/product/4454/ DESCRIPTION: Javier...
