PT-2018-9332

Name of the Vulnerable Software and Affected Versions nmap versions 6.49BETA6 through 7.60 Description The issue is related to a Directory Traversal vulnerability in the NSE script http-fetch that can result in file overwrite. This can be exploited when a victim runs the http-fetch script against...

AMD Driver Installer and Gaming Evolved Product plays.tv Service Write File Vulnerability

AMD driver-installation packages and Gaming Evolved products are both products of AMD, Inc. AMD driver-installation packages are a set of driver installation packages for AMD graphics cards. Gaming Evolved products are game optimization products. plays.tv is one of the game recording and sharing...

Arbitrary File Overwrite

JSNAPy is vulnerable to arbitrary file overwrite attacks. The default configuration and sample files are created world writable, allowing a local malicious user to edit files in the /etc/jsnapy directory...

PT-2018-10107

Name of the Vulnerable Software and Affected Versions pcs versions prior to 0.9.164 pcs version 0.10 Description The issue allows for privilege escalation via an authorized user making a malicious REST call. The REST interface of the pcsd service fails to properly sanitize the file name from the...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

Cloud Foundry Cloud Controller Path Traversal Vulnerability

Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from the Cloud Foundry Foundation, which provides container scheduling, continuous delivery, and automated service deployment.Cloud Controller is one of the cloud controllers. A path traversal vulnerability exists...

rubygems: Arbitrary file overwrite due to incorrect validation of specification name

It was found that rubygems did not sanitize gem names during installation of a given gem. A specially crafted gem could use this flaw to install files outside of the regular directory...

Important: Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update

An update for rh-ruby23-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

rubygems: Arbitrary file overwrite due to incorrect validation of specification name

It was found that rubygems did not sanitize gem names during installation of a given gem. A specially crafted gem could use this flaw to install files outside of the regular directory...

Important: Red Hat Security Advisory: rh-ruby22-ruby security, bug fix, and enhancement update

An update for rh-ruby22-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2018-1448

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 includes DB2 Connect Server contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043...

CVE-2018-1448

CVE-2018-1448 affects IBM Db2 for Linux/UNIX/Windows (including Db2 Connect Server) and can allow a local attacker to overwrite arbitrary files owned by the DB2 instance owner. Affected versions include 9.7, 10.1, 10.5, and 11.1. IBM X-Force ID: 140043. The risk is described as high (base CVSS v3...

CVE-2018-5731: Improper Input Validation

An issue was discovered in Heimdal PRO 2.2.190. As part of the scanning feature, a process called md.hs writes an executable called CS1.tmp to C:\windows\TEMP. Afterwards the executable is run. It is possible for an attacker to create the file first, let md.hs overwrite it, and then rewrite the...

Pivotal Spring Boot Elevation of Privilege Vulnerability

Pivotal Spring Boot is the U.S. Pivotal Software, Inc. of a new framework used to simplify the initial setup of new Spring applications as well as the development process. A security vulnerability exists in Pivotal Spring Boot versions 1.5.0 through 1.5.9 and 2.0.0.M1 through 2.0.0.M7. An attacke...

Arbitrary File Overwrite Through Symlink Attack

terminal-share is vulnerable to arbitrary file overwrite through symlink attacks. The vulnerability exists due to the creation of the hardcoded /tmp/test11 file found in index.js. This allows an unprivileged user of the shared machine to overwrite a privileged file by creating a symbolic link fil...

CVE-2018-1196

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

CVE-2018-1196: Improper Link Resolution Before File Access

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

PT-2018-10922

Name of the Vulnerable Software and Affected Versions Spring Boot versions 1.5.9 and earlier Spring Boot versions 2.0.0.M1 through 2.0.0.M7 Description The issue allows the run user to overwrite and take ownership of any file on the same system due to a symlink attack. This can happen when the...

Apache ODE Override Vulnerability

Apache ODE is the United States Apache Apache Software Foundation , a business process building engine , it has to communicate with Web services , send and receive messages , handle data manipulation and error recovery functions . A security vulnerability exists in Apache ODE. An attacker could...

CVE-2018-1316: Improper Limitation of a Pathname to a Restricted Directory

The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was...