3468 matches found
Feynmf: Insecure temporary file creation
Background Feynmf is a combined LaTeX and Metafont package for easy drawing of professional quality Feynman and maybe other diagrams. Description Kevin B. McCarty discovered that the feynmf.pl script creates a temporary "properly list" file at the location "$TMPDIR/feynmf$PID.pl", where $PID is t...
CVE-2007-4701
WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file...
CVE-2007-5927
Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...
CVE-2007-5927
CVE-2007-5927 (OpenBase) affects OpenBase 10.0.5 and earlier. A directory traversal issue in the GlobalLog stored procedure allows remote authenticated users to create files with arbitrary contents by supplying a leading .. sequence as the first argument. The issue is noted to be exploitable in c...
Scribe <= 0.2 Remote PHP Code Execution Vulnerability
Exploit for unknown platform in category web applications ===================================================== Scribe | |||| /| / / --------------------------------------------------------------- Scribe YOURPHPCODE" br...
GLSA-200710-22 : TRAMP: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200710-22 TRAMP: Insecure temporary file creation Stefan Monnier discovered that the tramp-make-tramp-temp-file function creates temporary files in an insecure manner. Impact : A local attacker could create symbolic links in the...
GLSA-200710-10 : SKK Tools: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200710-10 SKK Tools: Insecure temporary file creation skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact : A local attacker could create...
SKK Tools: Insecure temporary file creation
Background SKK is a Japanese input method for Emacs. Description skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact A local attacker could create symbolic links in the directory where the temporary files ar...
CVE-2007-5270
CVE-2007-5270 affects Drupal via the Boost module prior to 4.7.x-1.0 and 5.x prior to 5.x-1.0. The vulnerability allows remote attackers to create or overwrite arbitrary files and perform cross-site scripting (XSS) through unspecified vectors. The available connected documents confirm the affecte...
FreeBSD : id3lib -- insecure temporary file creation (15ec9123-7061-11dc-b372-001921ab2fa4)
Debian Bug report log reports : When tagging file $foo, a temporary copy of the file is created, and for some reason, libid3 doesn't use mkstemp but just creates $foo.XXXXXX literally, without any checking. This would silently truncate and overwrite an existing $foo.XXXXXX. %NASLMINLEVEL 70300 C...
Motorola Timbuktu Pro 8.6.3 Arbitrary File Deletion/Creation
No description provided by source. !/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro 8.6.3 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590 Copyright:...
timbuktu_sploit.txt
!/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro 8.6.3 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590 Copyright: c2007 BastardLabs...
CVE-2007-4983
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...
po4a symbolic links problem
Symbolic links problem on /tmp/gettextization.failed.po file creation...
Directory traversal
Directory traversal vulnerability in Enriva Development Magellan Explorer 3.32 build 2305 and earlier allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder...
CVE-2007-4842
Directory traversal vulnerability in Enriva Development Magellan Explorer 3.32 build 2305 and earlier allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder...
Directory traversal
Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrary files via ".." dot dot backslash sequences in a filename. NOTE: the ".." are not displayed when the user lists files. NOTE: this can be leveraged for code...
CVE-2007-4756
Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrary files via ".." dot dot backslash sequences in a filename. NOTE: the ".." are not displayed when the user lists files. NOTE: this can be leveraged for code...
CVE-2007-4583
The CVE-2007-4583 entry describes multiple absolute path traversal vulnerabilities in the ACTi Acti Network Video Recorder (NVR) SP2 2.0, specifically in nvUtility.dll 1.0.14.0 and the nvUtility.Utility.1 ActiveX control. The flaws allow remote attackers to exploit two methods: SaveXMLFile (arbit...
CVE-2007-4220
CVE-2007-4220 is a directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows. The issue allows remote attackers to create or delete arbitrary files via a .. in a Send request (likely related to the Send and Exchange services). Related records note an incomplete fix later...