vm-support 0.88 File Overwrite / Information Disclosure

Author: dolevf Date: 18.6.2014 Version: vm-support latest version 0.88 Tested on: Red Hat Enterprise Linux 6 Relevant CVEs: 2014-4199, 2014-4200 1. About the application ------------------------ VMware support is a tool designed to collect diagnostic information such as logs, configuration files...

AIX 7.1 TL 2 : bos.rte.odm (U865302)

The remote host is missing AIX PTF U865302, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

CVE-2014-5120

CVE-2014-5120 affects the PHP GD extension. gd_ctx.c does not ensure that pathnames lack a NUL (%00) sequence, enabling remote attackers to overwrite arbitrary files via crafted input when calling the imagegd, imagegd2, imagegif, imagejpeg, imagepng, imagewbmp, or imagewebp functions. Affected ve...

CVE-2014-5120

gdctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the 1 imagegd, 2 imagegd2, 3 imagegif, 4 imagejpeg, 5...

PT-2014-1420

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.x through 5.4.31 PHP versions 5.5.x through 5.5.15 Description The issue exists in the GD component of PHP due to the presence of %00 sequences in pathnames. This allows remote attackers to overwrite arbitrary files by providi...

CVE-2014-5120: Improper Input Validation

gdctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the 1 imagegd, 2 imagegd2, 3 imagegif, 4 imagejpeg, 5...

CVE-2014-2524

The rltropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.PID file...

CVE-2014-2524

The rltropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.PID file...

CVE-2014-5260

The 1 mkxmltype and 2 mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/xml temporary file...

CVE-2014-5260

The 1 mkxmltype and 2 mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/xml temporary file...

Design/Logic Flaw

The 1 mkxmltype and 2 mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/xml temporary file...

CVE-2014-5260: Improper Link Resolution Before File Access

The 1 mkxmltype and 2 mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/xml temporary file...

XML Sitemap Generator 3.2.8 - XML File Overwrite Arbitrary Code Execution

The google-xml-sitemaps-generator WordPress plugin was affected by a XML File Overwrite Arbitrary Code Execution security vulnerability...

SmartVmd ActiveX 1.1 - Remote File Overwrite Exploit

No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ SmartVmd ActiveX v 1.1 remote File Overwrite Exploit br/ download : http://www.smartvmd.com/setup/SetupActiveXVmd.msi br/ b/ object id=hsmx classid=clsid:E3462D53-47A6-11D8-8EF6-DAE89272743C/object SCRIPT / Report for...

ARCservIT 6.61/6.63 Client inetd.tmp Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2748/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to corrupt arbitrary files. When it runs with the parameters 'inet add', 'asagent', opens and overwrites it if it...

PowerPoint Viewer OCX 3.1 - Remote File Overwrite Exploit

No description provided by source. HTML ---------------------------------------------------------- br PowerPoint Viewer OCX v3.1 br ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

IBM DB2 db2job File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by root.db2asgrp. It has been reported that db2job writes to a number of files with root privileges. The files...

PrecisionID Barcode ActiveX 1.9 - Remote Arbitrary File Overwrite Exploit

No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/16/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------------- bIE 6 PrecisionID Barco...

Unreal Commander 0.92 - ZIP / RAR Archive Handling Traversal Arbitrary File Overwrite

No description provided by source. source: http://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal vulnerability, an information-disclosure...

PrecisionID Barcode PrecisionID_Barcode.DLL ActiveX 1.9 Control Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24014/info pre span style=font: 14pt Courier New;p align=centerb2007/05/16/b/p/span codespan style=font: 10pt Courier New;span...