CVE-2014-6256

Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public 1 read or 2 execute access via a move action, aka ZEN-15386...

Fedora 18 : pgbouncer-1.5.3-1.fc18 (2012-17507)

Update to 1.5.3, which also fixes bz 872527. - Add mkauth.py among installed files. - Move pgbouncer.ini under /etc/pgbouncer directory. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Nginx 0.7.61 - WebDAV Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

CVE-2007-5819: Undefined Security Weakness

IBM Tivoli Continuous Data Protection for Files CDP 3.1.0 uses weak permissions unrestricted write for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients...

Microsoft FTP client directory traversal

It's possible to place downloaded file in any directory from server side...

CVE-2002-1139

The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target...

Real player directory traversal

Directory traversal in .rjs files allows to place file in any directory...

Adobe Acrobat does not adequately validate Acrobat JavaScript

Overview Adobe Acrobat contains a vulnerability in its JavaScript parsing engine that could allow an attacker to place arbitrary files on the local file system. Description Different versions of Adobe Acrobat software can create, modify, and read Portable Document Format PDF files. Acrobat...

CVE-2001-1258

Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...

Проблемы с SCP в OpenSSH

Со стороны сервера можно контролировать размещение файлов на компьютере клиента...

CVE-1999-0399: Undefined Security Weakness

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands...