CVE-2006-2743

CVE-2006-2743 concerns Drupal 4.6.x (pre-4.6.7) and 4.7.0, running on Apache with mod_mime. The flaw: files with multiple extensions are not handled properly, allowing remote attackers to upload, modify, or execute arbitrary files in Drupal’s files directory. Connected references confirm this CVE...

CVE-2006-2743

Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with modmime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory...

IntelliTamper 2.07 (*.map file) Local Arbitrary Code Execution Exploit

No description provided by source. /////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...

IntelliTamper 2.07 (*.map file) Local Arbitrary Code Execution Exploit

Exploit for unknown platform in category local exploits ====================================================================== IntelliTamper 2.07 .map file Local Arbitrary Code Execution Exploit ======================================================================...

IntelliTamper 2.07 - '.map' Local Arbitrary Code Execution (1)

/////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...

Winamp < 5.14 .M3U File Handling Buffer Overflow

Binary data 3445.prm...

Winamp < 5.13 Malformed Playlist File Handling Overflow

Binary data 3390.prm...

BitComet 0.60 - &#039;.Torrent&#039; File Handling Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/16311/info BitComet is prone to a buffer-overflow vulnerability. This issue presents itself when the application attempts to process a malformed '.torrent' file. Exploitation of this issue could allow attacker-supplied machine code to be executed in th...

[SA18230] Sun Solaris PC NetLink Insecure File Handling Vulnerability

TITLE: Sun Solaris PC NetLink Insecure File Handling Vulnerability SECUNIA ADVISORY ID: SA18230 VERIFY ADVISORY: http://secunia.com/advisories/18230/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Solaris PC Netlink 2.x http://secunia.com/product/6667/...

KLA10171 Multiple vulnerabilities in Gadu-Gadu

Multiple serious vulnerabilities have been found in Gadu-Gadu. Malicious can use these vulnerabilities to obtain sensitive information or cause denial of service Below is a complete list of vulnerabilities 1. Vectors related to Easycall can be exploited remotely via outgoing calls; 2. A buffer...

ms05002 exploit the program and its test results-vulnerability warning-the black bar safety net

Article author: invincible most lonelyE. S. T Information source: evil octal China Vulnerability details can go to the following address to download: Get the code,read the code. The original code is the use of the local bonding of the shellcode. Practical too poor,and because of this vulnerabilit...

[SA17202] AIX LSCFG Insecure Temporary File Handling Vulnerability

TITLE: AIX LSCFG Insecure Temporary File Handling Vulnerability SECUNIA ADVISORY ID: SA17202 VERIFY ADVISORY: http://secunia.com/advisories/17202/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A...

DSA-815-1 kdebase - programming error

Bulletin has no description...

LeapFTP Client 2.7.32.7.4 - .LSQ File Remote Buffer Overflow (PoC)

LeapFTP Client 2.7.32.7.4 - .LSQ File Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/14655/info LeapFTP client is prone to a remote buffer overflow vulnerability. The issue arises when the client handles a malformed LeapFTP Site Queue .lsq file. A remote attacker may gain...

CVE-2005-1853

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges...

GLSA-200507-22 : sandbox: Insecure temporary file handling

The remote host is affected by the vulnerability described in GLSA-200507-22 sandbox: Insecure temporary file handling The Gentoo Linux Security Audit Team discovered that the sandbox utility was vulnerable to multiple TOCTOU Time of Check, Time of Use file creation race conditions. Impact : Loca...

[ GLSA 200507-22 ] sandbox: Insecure temporary file handling

Gentoo Linux Security Advisory GLSA 200507-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

iDEFENSE Security Advisory 07.14.05: Sophos Anti-Virus Zip File Handling DoS Vulnerability

Sophos Anti-Virus Zip File Handling DoS Vulnerability iDEFENSE Security Advisory 07.14.05 www.idefense.com/application/poi/display?id=283&type=vulnerabilities July 14, 2005 I. BACKGROUND Sophos Small Business Suite includes the Sophos PureMessage Small Business Edition, combining virus and spam...

Oracle Forms Insecure Temporary File Handling

Name Oracle Forms Insecure Temporary File Handling Systems Affected Oracle Forms 4.5, 6.0, 6i, 9i Severity Medium Risk Category Information disclosure Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 13 July 2005 V 1.00 Advisory AKSEC2003-006 Oracle...

CVE-2005-1922

The MS-Expand file handling in Clam AntiVirus ClamAV before 0.86 allows remote attackers to cause a denial of service file descriptor and memory consumption via a crafted file that causes repeated errors in the climsexpand function...