4358 matches found
DSA-279 metrics - insecure temporary file creation
Paul Szabo and Matt Zimmerman discovered two similar problems in metrics, a tools for software metrics. Two scripts in this package, "halstead" and "gather\stats", open temporary files without taking appropriate security precautions. "halstead" is installed as a user program, while "gather\stats"...
CVE-2002-0299
The CVE-2002-0299 entry concerns CNet CatchUp prior to version 1.3.1. The vulnerability arises when a crafted .RVP file enables arbitrary code execution by creating a file with an arbitrary extension (for example, .BAT) that is executed during a scan. The provided documents identify the affected ...
CVE-2002-1422: Undefined Security Weakness
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters...
Axis Communications Video Server 2.x - Command.cgi File Creation
Axis Communications Video Server 2.x - Command.cgi File Creation source: https://www.securityfocus.com/bid/6987/info It has been reported that the Axis Video Servers do not properly handle input to the 'command.cgi' script. Because of this, an attacker may be able to create arbitrary files that...
Axis Communications Video Server 2.x - 'Command.cgi' File Creation
source: https://www.securityfocus.com/bid/6987/info It has been reported that the Axis Video Servers do not properly handle input to the 'command.cgi' script. Because of this, an attacker may be able to create arbitrary files that would result in a denial of service, or potentially command...
Multiple terminal emulators problems
By inserting secape sequences into terminal session via log files, e-mail, etc it's possible to force client into performing a set of operation, like sending control command to server, create a file, etc...
CVE-2002-1508
slapd in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests...
MacOS X TruBlueEnvironment privelege escalation
File in the user specified path is created...
CVE-2002-1508
CVE-2002-1508 affects OpenLDAP2 (OpenLDAP 2) where the slapd service on version 2.2.0 and earlier is vulnerable to a race condition that can allow a local user to overwrite arbitrary files during the creation of a log file for rejected replication requests. The vulnerability is rooted in how the ...
Multiple cgihtml vulnerabilities
Overview -------- cgihtml is a collection of routines for parsing World Wide Web WWW Common Gateway Interface CGI input and outputting HyperText Markup Language HTML. http://www.eekim.com/software/cgihtml/ According to the authors website, it has potentially been used in the implementation of...
S8Forum 3.0 - Remote Command Execution
S8Forum 3.0 - Remote Command Execution source: https://www.securityfocus.com/bid/6547/info S8Forum is prone to a remote command execution vulnerability. When a user registers with the forum, a file is created locally with the specified username. The contents of this file will be the data entered ...
CVE-2002-1716
The Host function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability...
PT-2002-2438 · Microsoft · Office Xp
Name of the Vulnerable Software and Affected Versions: Microsoft Office XP Description: The issue concerns the Host function in the Microsoft spreadsheet component, which allows remote attackers to create arbitrary files using the SaveAs capability. Recommendations: For Microsoft Office XP,...
CVE-2002-1345
Technical details for CVE-2002-1345 are not provided in the supplied connected documents; no explicit affected products, versions, or fixes are available here. Monitor for updates.
[SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 202-1 [email protected] http://www.debian.org/security/ Martin Schulze December 3rd, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...
DSA-188 apache-ssl - several vulnerabilities
Bulletin has no description...
[SECURITY] [DSA 160-1] New scrollkeeper packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 160-1 [email protected] http://www.debian.org/security/ Martin Schulze September 3rd, 2002 http://www.debian.org/security/faq -...