4358 matches found
CVE-2001-0403: Undefined Security Weakness
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI...
CVE-2001-0222: Undefined Security Weakness
webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack...
CVE-2001-0109: Undefined Security Weakness
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file...
VMware symlink problems
Problem description ---------------------- There is symlink vulnerability in the vmware-mount.pl script which comes with lates VMware. 2. Details ---------- While mounting virtual disk drives using the vmware-mount.pl script, a temporary file named vmware-mount.pl.PID where PID is the current...
SuSE 7.0 - KFM Insecure .TMP File Creation
SuSE 7.0 - KFM Insecure .TMP File Creation source: https://www.securityfocus.com/bid/2629/info KFM is the KDE File Manager, included with version 1 of the KDE base package in most Linux installations. KFM is designed as a graphical, easily navigated interface to the Linux Filesystem. A problem wi...
SuSE 7.0 - KFM Insecure '.TMP' File Creation
source: https://www.securityfocus.com/bid/2629/info KFM is the KDE File Manager, included with version 1 of the KDE base package in most Linux installations. KFM is designed as a graphical, easily navigated interface to the Linux Filesystem. A problem with KFM could allow the overwriting of files...
Проблемы в exuberant-ctags (symbolic link)
Проблема символьных линков при создании временных файлов...
Siemens Reliant UNIX 5.4 - ppd -T Race Condition
Siemens Reliant UNIX 5.4 - ppd -T Race Condition source: https://www.securityfocus.com/bid/2606/info Reliant Unix is a variant of the UNIX Operating System distributed by Fujitsu-Siemens. Reliant Unix is a scalable UNIX Operating system designed for use on Siemens servers. A problem in the...
PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation
PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and...
PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation
source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and public keys to facilitate transmission in e-mail messages. Wh...
[ Hackerslab bug_paper ] SunOS application perfmon vulnerability
============================================================================== Hackerslab bugpaper SunOS application perfmon vulnerability ============================================================================== File : /opt/JSParm/bin/perfmon SYSTEM : Solaris 2.X INFO : parm is a program th...
[SECURITY] [DSA-016-1] New version of wu-ftpd released
---------------------------------------------------------------------------- Debian Security Advisory DSA-016-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : wu-ftpd...
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
CVE-2000-0698: Undefined Security Weakness
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack...
CVE-2000-0679: Undefined Security Weakness
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition (1)
SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition 1 source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE...
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)
source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (1)
source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...
Metertek pagelog.cgi Traversal Arbitrary File Access
The 'pagelog.cgi' cgi is installed. This CGI has a well known security flaw that lets an attacker create arbitrary files on the remote server, ending in .txt, and reading arbitrary files ending in .txt or .log Warning : this flaw was not tested by Nessus. Check the existence of...