wkit.joe.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Joe's Own Editor File Link Vulnerability ADVISORY ID: WSIR-00/11-01 CONTACT: Patrik Birgersson, Wkit Security AB CLASS: File Handling Error OBJECT: joe1 exec VENDOR: Josef H. Allen STATUS: Vendor not reachable REMOTE: No LOCAL: Yes DATE:...

Joe's Own Editor File Link Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Joe's Own Editor File Link Vulnerability ADVISORY ID: WSIR-00/11-01 CONTACT: Patrik Birgersson, Wkit Security AB CLASS: File Handling Error OBJECT: joe1 exec VENDOR: Josef H. Allen STATUS: Vendor not reachable REMOTE: No LOCAL: Yes DATE:...

Дырка в GNOrpm

Некорректная работа с временными файлами позволяет переписать любой файл...

DoS против MailSweeper

Некорректный разбор вложенных файлов во вложенных письмах приводит к отказу сервера...

Дырка в xpdf

Некорректная работа с временными файлами позволяют атаку через символьные линки?...

дырка в Helix GNOME Updater

Некорректная работа с временными файлами помещаются во временную директорию, не проверяется принадлежность директории...

ISSalert: ISS Security Advisory: Insecure file handling in IBM AIX frcactrl program

ISS Security Advisory April 26, 2000 Insecure file handling in IBM AIX frcactrl program Synopsis: Internet Security Systems ISS X-Force has discovered a vulnerability in the AIX frcactrl program. The Fast Response Cache Accelerator FRCA is a kernel module that can be used with the IBM HTTP server...

FreeBSD-SA-00:01.make

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:01 Security Advisory FreeBSD, Inc. Topic: Insecure temporary file handling in make1 Category: core Module: make Announced: 2000-01-19 Affects: All versions before the...

IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition

/ source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked multimedia conferencing tool. InPerson provides...

elm_filter.txt

Subject: elm filter program To: [email protected] Mark Ultor wrote: I've found a bug in filter on Elm 2.4 PL25. filter got SGID on mail group. sowatech:$ filter -f perl -e ' print "A" x 5000' Segmentation fault "filter" is inherently unsafe. A bug has been described in 1995 which allows...

tmp-advisory.txt

L0pht Security Tool and miniAdvisory Advisory released Jan 8 1999 Application: A tool designed to monitor directory activity, copy transient files based upon regular expression matching, syslog upon seeing links created, etc. etc. Severity: Just about every OS out there is replete with programs...

procmail.screen.txt

Date: Mon, 5 Apr 1999 19:40:37 +0100 From: Chris Evans To: [email protected] Subject: More procmail Hi, Well well since Debian appear to have "broken silence" on the procmail front rather than wait for an official announcement... I found something potentially more serious than boring heap...

windows98.bof.txt

Date: Mon, 15 Feb 1999 17:59:13 -0500 From: Ervin Fried To: [email protected] Subject: Re: Win98 Buffer Overflow File attached my .02$: Explorer has bugs in handling files with pathname longer than or equal to the documented max and files with components that exceed other maximums. CreateFile...

[SECURITY] New versions of file-runner fix security problem

We have received a report that the file-runner program opens files in /tmp in an unsecure manner. This can result in damaging other files when linked to them. We recommend you upgrade your file-runner package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 1.3.1...

[SECURITY] Current versions of mailx fixes /tmp problem

Former versions of mailx used an unsecure means of opening files beneath /tmp for writing. This can be used to damage files in a users directory or even systemwide. We recommend you upgrade your mailx package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 1.3.1...

[SECURITY] Current versions of mailx fixes /tmp problem

Former versions of mailx used an unsecure means of opening files beneath /tmp for writing. This can be used to damage files in a users directory or even systemwide. We recommend you upgrade your mailx package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 1.3.1...

APC PowerChute Plus 4.2.2 - Denial of Service

APC PowerChute Plus 4.2.2 - Denial of Service // source: https://www.securityfocus.com/bid/83/info // // APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens...

APC PowerChute Plus 4.2.2 - Denial of Service

// source: https://www.securityfocus.com/bid/83/info // // APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens to TCP ports 6547 and 6548, as well as for...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3178633)

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...