DSA-160 scrollkeeper - insecure temporary file creation

Bulletin has no description...

CVE-2001-1146

AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 is affected. The issue stems from creating temporary files with predictable names, enabling local users to perform a symlink attack to modify files. The description in the Connected documents confirms the root cause as predictable t...

CVE-2002-0591

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...

[NEWS] Lotus Domino Bindsock Arbitrary File Creation Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

AOL Instant Messenger 4.x - Arbitrary File Creation

source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that are sent to a user include an img tag and a data ta...

AOL Instant Messenger 4.x - Arbitrary File Creation

AOL Instant Messenger 4.x - Arbitrary File Creation source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that...

AIM's 'Direct Connection' feature could lead to arbitrary file creation

AIM's 'Direct Connection' feature could lead to arbitrary file creation ---------------------------------------------------------------------- - Author: Noah Johnson [email protected] Affected versions: All versions of AOL Instant Messenger up to 4.8 beta on all platforms of Windows as far as I...

Irix XFS DoS

It's possible to create file to cause error in processing application...

CVE-2002-0087

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...

CVE-2001-0265

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...

CVE-2001-0265

CVE-2001-0265 concerns the Windows PGP ASCII Armor parser (versions Windows PGP 5 to 7.0.3, latest). The vulnerability arises from handling malformed ASCII-armored data, which allows an attacker to create arbitrary files in the same directory as the armored file. This can lead to arbitrary code e...

CVE-2002-0010

Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via 1 the sql parameter in buglist.cgi, 2 invalid field names from the "boolean chart" query in buglist.cgi, 3 the mybugslink parameter in userprefs.cgi, 4 a malformed bug ID in the...

Символьные линки в Maelstrom (symbolic links)

Создается файл /tmp/f без проверки символьных линков...

Inproper input validation in Bugzilla <=2.14 - exploit

Since advisory and patched version is already released, here goes description of vulnerabilities I discovered in Bugzilla almost year ago. 1. Creating files on remote server. ----------------------------------- Nothing spectacular, but this vulnerability may allow us easily at least when using...

Redhat 7.0 local root (via uucp) (attempt 2)

Affects: RedHat 7.0 possibly others 28 Aug 2001 01:27:24 +1200 uucp vulnerability exposed to vendor 9 Nov 2001 07:14:15 +1300 this makewhatis vulnerability exposed to vendor /usr/sbin/makewhatis An earlier version1 of makewhatis had a fault in the handling of compressed files that allowed executi...

Hypermail SSI Vulnerability

Hypermail SSI Vulnerability qDefense Advisory Number QDAV-2001-11-1 Product: Hypermail Vendor: Hypermail Development http://www.hypermail.org Severity: Remote; Attacker may be able to execute arbitrary commands on servers that run Hypermail and SSI Vendor Status: Vendor contacted; patch released ...

webcache.pl

Proof-of-concept exploit for Oracle9iAS Web Cache/2.0.0.1.0 Creates the file c:\defcom.iyd By [email protected] C2001 Since we do not control the space after what ESP points to, I was lazy and did a direct buffer jump. So, if it does not work, try changing the return addressstart of buffer in me...

Samba NETBIOS Name Traversal Arbitrary Remote File Creation

The remote Samba server, according to its version number, allows creation of arbitrary remote files. This vulnerability allows an attacker to overwrite arbitrary files by supplying an arbitrarily formed NetBIOS machine name to this server, and to potentially become root on the remote server. An...

Security Bulletin MS01-051

---------------------------------------------------------------------- Title: Malformed Dotless IP Address Can Cause Web Page to be Handled in Intranet Zone Date: 10 October 2001 Software: Internet Explorer Impact: Three vulnerabilities: - Cause web page to render a web page using inappropriate...

Slackware 7.0/7.1/8.0 - Manual Page Cache File Creation

// source: https://www.securityfocus.com/bid/3054/info Slackware Linux contains a configuration error that enables local users to create files in the directory used by the system manual pager 'man' for cache files. Due to the behaviour of the 'man' program, it may be possible for an attacker to...