4149 matches found
CVE-2002-1425
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ dot-dot sequence in the filename to be extracted...
CVE-2002-1425
CVE-2002-1425 describes a directory traversal vulnerability in the munpack utility (part of mpack) versions 1.5 and earlier. The issue allows remote attackers to create new files in the parent directory by supplying a filename containing a ../ sequence during extraction. Debian DSAs and OpenVAS e...
CVE-2002-1425
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ dot-dot sequence in the filename to be extracted...
CVE-2002-1366: Undefined Security Weakness
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...
CVE-2002-1425: Undefined Security Weakness
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ dot-dot sequence in the filename to be extracted...
GLSA-200406-18 : gzip: Insecure creation of temporary files
The remote host is affected by the vulnerability described in GLSA-200406-18 gzip: Insecure creation of temporary files The script gzexe included with gzip contains a bug in the code that handles tempfile creation. If the creation of a temp file fails when using gzexe fails instead of bailing out...
GLSA-200405-19 : Opera telnet URI handler file creation/truncation vulnerability
The remote host is affected by the vulnerability described in GLSA-200405-19 Opera telnet URI handler file creation/truncation vulnerability The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able t...
GLSA-200407-01 : Esearch: Insecure temp file handling
The remote host is affected by the vulnerability described in GLSA-200407-01 Esearch: Insecure temp file handling The eupdatedb utility uses a temporary file /tmp/esearchdb.py.tmp to indicate that the eupdatedb process is running. When run, eupdatedb checks to see if this file exists, but it does...
Hafiye 1.0 Remote Terminal Escape Sequence Injection Vulnerability
No description provided by source. / Remote Exploit for Hafiye-1.0 Terminal Escape Sequence Injection Vulnerability Written by Serkan Akpolat Homepage: http://deicide.siyahsapka.org E-mail: deicide siyahsapka org Greets: Virulent, gorny and all other netricians / include stdio.h include sys/types...
IMWheel 1.0 - Predictable Temporary File Creation
source: https://www.securityfocus.com/bid/11008/info IMWheel is reported prone to a predictable temporary file creation vulnerability. This issue is a race condition error and may allow a local attacker to carry out denial of service attacks against other users and possibly gain elevated...
scp < 2.1 Traversal File Create/Overwrite
Binary data 1970.prm...
CVS < 1.11.10 / 1.12.3 pserver Crafted Module Request Arbitrary File / Directory Creation
Binary data 1180.prm...
rsync < 2.6.1 Traversal Arbitrary File Creation
Binary data 1216.prm...
CVE-2004-0689: Improper Link Resolution Before File Access
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files...
[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...
DEBIAN-CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2004-0235
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with 1 .. sequences or 2 absolute pathnames with double leading slashes "//absolute/path"...