CVE-2007-1954

Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...

CVE-2007-1954

CVE-2007-1954 relates to multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 . The issue allows remote attackers to create files in arbitrary directories by supplying a path with a leading “..” inside archive formats (including .gz, .jar, .rar, .tar.gz, .zip, and .tar). The...

CVE-2007-1954

Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...

CVE-2007-1954: Undefined Security Weakness

Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...

CVE-2007-0728

CVE-2007-0728 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.8. It describes an insecure file-creation flaw during USB printer initialization, allowing local users to create or overwrite arbitrary files. The available source summarizes impact as local access with partial confidentiality/integr...

CVE-2007-0728: Undefined Security Weakness

Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files insecurely while initializing a USB printer, which allows local users to create or overwrite arbitrary files...

McAfee Virex Virus Scan for Mac OS X symbolic links problem and protection bypass

Weak permissions and symbolic links problem on /Library/Application/Sypport/Virex/VShieldExecute.txt file creation...

iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability

IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability iDefense Security Advisory 02.22.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 22, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for higher end...

IBM DB2 database multiple security vulnerabilities

Multiple privilege escalations, file creation...

CVE-2007-1086: Undefined Security Weakness

Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."...

HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00862809 Version: 1 HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation NOTICE: The information in this Security Bulletin should be acted upon as soon a...

HP-UX SLSd unauthorized access

It's possible to create any file with attacker-supplied data...

Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC

No description provided by source. /usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= Remotesoft .NET Explorer 2.0.1 Local Stack Overflow PoC ======================================================= /usr/bin/ python print...

Remotesoft .NET Explorer 2.0.1 - Local Stack Overflow (PoC)

/usr/bin/ python print "--------------------------------------------------------------" print "Remotesoft .NET Explorer 2.0.1 Stack Overflow" print "url: http://www.remotesoft.com/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site: http://shinnai.altervista.org" print...

Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC

No description provided by source. !/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

Fedora Core 6 : mutt-1.4.2.2-3.fc6 (2006-1063)

Tue Oct 24 2006 Miroslav Lichvar 5:1.4.2.2-3 - fix insecure temp file creation on NFS 211085, CVE-2006-5297 - Thu Aug 3 2006 Miroslav Lichvar 5:1.4.2.2-2 - fix a SASL authentication bug 199591 - Mon Jul 17 2006 Miroslav Lichvar 5:1.4.2.2-1 - update to 1.4.2.2 - fix directories in manual.txt...

Fedora Core 5 : mutt-1.4.2.1-7.fc5 (2006-1061)

Tue Oct 24 2006 Miroslav Lichvar 5:1.4.2.1-7.fc5 - fix insecure temp file creation on NFS 211085, CVE-2006-5297 - Thu Jun 29 2006 Miroslav Lichvar 5:1.4.2.1-6.3.fc5 - fix a buffer overflow when processing IMAP namespace 197152, CVE-2006-3242 Note that Tenable Network Security has extracted the...

CVE-2007-0205: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via ".." sequences in the 1 ajskin and 2 skinedit parameters. NOTE: this can be leveraged for file inclusion by creating a skin file in the la...

Analysis of black anti-CD QQ black hand-vulnerability warning-the black bar safety net

Look at the hack line of Defense for the official announcement, 6 issues disc this month I promote the column, the moving network vulnerabilities using the animation included with the tool will make the antivirus Alarm, tips for Trojan-PSW. Win32. QQShou. ed. A thought, my old magic computer blac...