2106 matches found
GLSA-200506-13 : webapp-config: Insecure temporary file handling
The remote host is affected by the vulnerability described in GLSA-200506-13 webapp-config: Insecure temporary file handling Eric Romang discovered webapp-config uses a predictable temporary filename while processing certain options, resulting in a race condition. Impact : Successful exploitation...
Sony Ericsson P900 Beamer - Malformed File Name Handling Denial of Service
source: https://www.securityfocus.com/bid/13782/info Sony Ericsson P900 handset is affected by a remote denial of service vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data into a finite sized buffer. The vulnerability...
Qpopper < 4.0.6 Multiple Insecure File Handling Local Privilege Escalation
According to its banner, the remote host is running a version of the Qpopper POP3 server that suffers from two local, insecure file handling vulnerabilities. First, it fails to properly drop root privileges when processing certain local files, which could lead to overwriting or creation of...
[Full-disclosure] MySQL < 4.0.12 && MySQL <= 5.0.4 : Insecure tmp file handling
MySQL mysqlinstalldb data manipulation vendor: http://www.mysql.com advisory: http://www.zataz.net/adviso/mysql-05172005.txt vendor informed: yes exploit available:no MySQL contain a security flaw how could allow a malicious local attacker to inject arbitrary SQL commands during database creation...
Apple iTunes < 4.8 MPEG-4 File Handling Overflow
Binary data 2889.prm...
CVE-2004-1084
The CVE-2004-1084 entry describes an Apache on Mac OS X vulnerability affecting versions 10.2.8 and 10.3.6 where remote attackers can read files and resource fork content via HTTP requests to specially named HFS+ data streams, bypassing Apache file handles. The root cause is related to how HFS+ d...
portupgrade -- insecure temporary file handling vulnerability
Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...
PHP Multiple Image Processing Functions File Handling DoS
According to its banner, the version of PHP installed on the remote host is vulnerable to a denial of service attack due to its failure to properly validate file data in the routines 'phphandleiff' and 'phphandlejpeg', which are called by the PHP function 'getimagesize'. Using a specially crafted...
[SECURITY] [DSA 691-1] New abuse packages fix local root exploit
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: libtiff security update
Updated libtiff packages that fix various integer overflows are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team The libtiff package contains a library of functions for manipulating TIFF Tagged Image...
GLSA-200501-31 : teTeX, pTeX, CSTeX: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200501-31 teTeX, pTeX, CSTeX: Multiple vulnerabilities teTeX, pTeX and CSTeX all make use of Xpdf code and may therefore be vulnerable to the various overflows that were discovered in Xpdf code CAN-2004-0888, CAN-2004-0889,...
Opera: Multiple vulnerabilities
Background Opera is a multi-platform web browser. Description Opera contains several vulnerabilities: fails to properly validate Content-Type and filename. fails to properly validate date: URIs. uses kfmclient exec as the Default Application to handle downloaded files when integrated with KDE...
EUVD-2004-1402
MediaWiki 1.3.8 and earlier, when used with Apache modmime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code...
ArGoSoft FTP Server < 1.4.2.8 Multiple .LNK File Handling Vulnerabilities
The remote host is running the ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server allows an attacker to upload shortcut .LNK files via either a 'SITE UNZIP' or 'SITE COPY' command and gain read and write access to any files and directories on the FTP server. C Tenable Network Security,...
[ GLSA 200501-31 ] teTeX, pTeX, CSTeX: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200501-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Perl: rmtree and DBI tmpfile vulnerabilities
Background Perl is a cross platform programming language. The DBI is the standard database interface module for Perl. Description Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way CAN-2005-0077. Paul Szabo found out that...
MS Internet Explorer .ANI files handling Downloader Exploit (MS05-002)
Exploit for unknown platform in category remote exploits ====================================================================== MS Internet Explorer .ANI files handling Downloader Exploit MS05-002 ====================================================================== / Modified by Vertygo aka Iva...
teTeX, pTeX, CSTeX: Multiple vulnerabilities
Background teTeX is a complete and open source TeX distribution. CSTeX is another TeX distribution including Czech and Slovak support. pTeX is another alternative that allows Japanese publishing with TeX. xdvizilla is an auxiliary script used to integrate DVI file viewing in Mozilla-based browser...
NetCat V 1.11 Multiple Bugs
Hello the nc V1.11 is bugged execute nc -p 777 -L -e cmd.exe create te file prova.txt and insert...
CVE-2004-2753
Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner."...