HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation

HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary,...

HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation

source: https://www.securityfocus.com/bid/29535/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers create and overwrite files with arbitrary, attacker-controlled content. Successful exploits may compromise affected computers and aid in...

Lha Directory Traversal Vulnerability in Testing and Extracting Process

Overview LHa for UNIX is vulnerable to directory traversal due to improper path validation when testing or extracting an archive. Impact An attacker could bypass access restriction and create arbitrary files in the directories for which he has no permission. Solution Please refer to the 'Vendor...

Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling

Overview Some email clients contain a vulnerability when handling an attached file with a file name using unicode. This may result in a directory traversal attack or displaying a file name diffrently from the actual file name. Impact Actual impact could differ depending on the email clients thoug...

Untrusted Java Web Start arbitrary file creation

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."...

Path traversal

Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 CompactSave and 2 SaveSession method in one control, and the 3 saveRecordedExploreToFile...

LightNEasy v.1.2.2 flat Multiple Vulnerabilities

LightNEasy v.1.2.2 flat Multiple Vulnerabilities Author: Gerendi Sandor Attila Date: April 14, 2008 Package: LightNEasy Product homepage: http://lightneasy.uni.cc/ Versions Affected: v.1.2.2 Other versions may also be affected Severity: High 1. Cross-Site Scripting XSS: Input passed to "page" in...

lightnhard-multi.txt

LightNEasy v.1.2.2 flat Multiple Vulnerabilities Author: Gerendi Sandor Attila Date: April 14, 2008 Package: LightNEasy Product homepage: http://lightneasy.uni.cc/ Versions Affected: v.1.2.2 Other versions may also be affected Severity: High 1. Cross-Site Scripting XSS: Input passed to "page" in...

GLSA-200804-11 : policyd-weight: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200804-11 policyd-weight: Insecure temporary file creation Chris Howells reported that policyd-weight creates and uses the '/tmp/.policyd-weight/' directory in an insecure manner. Impact : A local attacker could exploit this...

GLSA-200804-09 : am-utils: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200804-09 am-utils: Insecure temporary file creation Tavis Ormandy discovered that, when creating temporary files, the 'expn' utility does not check whether the file already exists. Impact : A local attacker could exploit the...

[Full-disclosure] iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability

iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high-end databases. The DB2 Administration Server DAS implements the server compone...

CVE-2008-1687

The 1 maketemp and 2 mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename...

Microsoft Visual InterDev 6.0 (SP6) SLN File Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================================== Microsoft Visual InterDev 6.0 SP6 SLN File Local Buffer Overflow PoC ====================================================================== usage: exploit.py FileName import s...

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

usage: exploit.py FileName import sys print "--------------------------------------------------------------------------------" print ' PoC 2 Microsoft Visual InterDev 6.0 SP6 ".sln" files Local Buffer Overflow' print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

GLSA-200803-26 : Adobe Acrobat Reader: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-26 Adobe Acrobat Reader: Insecure temporary file creation SUSE reported that the 'acroread' wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact : A local...

Motorola Timbuktu Pro <= 8.6.5 File Deletion/Creation Exploit

No description provided by source. !/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro = 8.6.5 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590 Copyright...

Motorola Timbuktu Pro 8.6.5 - File DeletionCreation

Motorola Timbuktu Pro 8.6.5 - File DeletionCreation !/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro = 8.6.5 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory:...

GLSA-200803-11 : Vobcopy: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-11 Vobcopy: Insecure temporary file creation Joey Hess reported that vobcopy appends data to the file '/tmp/vobcopy.bla' in an insecure manner. Impact : A local attacker could exploit this vulnerability to conduct symlink...

CVE-2008-1191

Technical details for CVE-2008-1191 are not provided in the supplied documents. Please monitor for updates.

GLSA-200803-03 : Audacity: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-03 Audacity: Insecure temporary file creation Viktor Griph reported that the 'AudacityApp::OnInit' method in file src/AudacityApp.cpp does not handle temporary files properly. Impact : A local attacker could exploit this...