CVE-2013-4157

Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the 1 e, 2 local-bricks.list, 3 bricks.err, or 4 limits.conf files in /tmp...

PT-2013-4878 · Red Hat · Red Hat Storage

Name of the Vulnerable Software and Affected Versions: Red Hat Storage version 2.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on certain files in /tmp, including e, local-bricks.list, bricks.err, or limits.conf. Recommendations: For Red Hat Storage...

PT-2013-4472

Name of the Vulnerable Software and Affected Versions AXIS Media Control AMC ActiveX control AxisMediaControlEmb.dll version 6.2.10.11 Description The issue allows remote attackers to create or overwrite arbitrary files. This can be achieved by providing a file path to certain methods, specifical...

WellinTech KingView ActiveX Multiple Arbitrary File Overwrite Vulnerabilities

Binary data scadakingviewactivex.nbin...

Byword 2.x File Overwrite Vulnerability

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL. Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iO...

Session fixation

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL...

CVE-2013-5725: Undefined Security Weakness

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL...

Code injection

A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222...

CVE-2013-1444

A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222...

Byword 2.x File Overwrite

Affected Vendor: http://metaclassy.com/ - Affected Software: Byword for iOS - Affected Version: 2.x prior to 2.1 - Issue Type: Lack of validation/user confirmation leading to destruction of data - Release Date: 29 Sept 2013 - Discovered by: Guillaume Ross - CVE Identifier: CVE-2013-5725 - Issue...

CVE-2013-2068: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. dot dot in the filename parameter to the 1 log, 2 upload, or 3 linuxpkgs method...

HP LoadRunner WriteFileString Directory Traversal - ver 2 (CVE-2013-4798)

A directory traversal and file overwrite vulnerability exists in HP LoadRunner. The vulnerability is due to insufficient input sanitization, which permits directory traversal in theWriteFileString method. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to visi...

CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option...

Code injection

lib/ansible/playbook/init.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/...

PT-2013-4922 · Red Hat +1 · Ansible +1

Name of the Vulnerable Software and Affected Versions: Ansible versions 1.2.0 through 1.2.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/. This occurs when the playbook does not run due to a...

KingView 6.53 Active-X File Overwrite / Creation

arg1="..................................\WINDOWS\win.ini" target.SaveToFile arg1...

SearchBlox Multiple Vulnerabilities (Sep 2013) - Active Check

SearchBlox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2013-5710

Name of the Vulnerable Software and Affected Versions libdigidoc versions 3.6.0.0 Description The issue is related to an absolute path traversal vulnerability in the handleStartDataFile function. This allows remote attackers to overwrite arbitrary files by using a filename that starts with a /...

CVE-2013-5648: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, as used in ID-software before 3.7.2 and other products, allows remote attackers to overwrite arbitrary files via a filename beginning with / slash or \ backslash in a DDOC file...

CVE-2013-3598

CVE-2013-3598 concerns a directory traversal in SearchBlox’s servlet/CreateTemplateServlet. The vulnerability, present in SearchBlox before version 7.5 build 1, occurs when the attacker supplies a name parameter containing ".." to trigger filesystem path traversal, enabling the remote overwrite o...