MS Internet Explorer & MSN Explorer Arbitrary File Overwrite

A security vulnerability in MS Internet Explorer 6 +7 + 8 + 9, allows an attacker to create a file . Tested On this Browsers : MS Internet Explorer 6 + 7 + 8 + 9 MSN Explorer GreenBrowser FlashPeak SlimBrowser AvantBrowser Version 2013 build 23 This is private exploit. You can buy it at...

RT -- multiple vulnerabilities

Thomas Sibley reports: We discovered a number of security vulnerabilities which affect both RT 3.8.x and RT 4.0.x. We are releasing RT versions 3.8.17 and 4.0.13 to resolve these vulnerabilities, as well as patches which apply atop all released versions of 3.8 and 4.0. The vulnerabilities address...

CVE-2013-0096: Undefined Security Weakness

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."...

CVE-2013-1224

CVE-2013-1224 affects Cisco Unified CVP (Resource Manager) prior to 9.0.1 ES 11. A directory traversal flaw allows remote attackers to overwrite arbitrary files by sending crafted HTTP or HTTPS requests that bypass parameter validation (Bug CSCub38369). The issue is tied to the Resource Manager c...

CVE-2013-1224: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted 1 HTTP or 2 HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369...

CVE-2013-3504

Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to the nagios account...

CVE-2013-3080

VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...

McAfee Virtual Technician McHealthCheck.dll ActiveX Control Save() Method Arbitrary File Overwrite (SB10040)

The remote Windows host has a version of the McAfee Virtual Technician / ePolicy Orchestrator McHealthCheck.dll ActiveX control that allows arbitrary files to be corrupted / overwritten due to a flaw in the Save method. If an attacker can trick a user on the affected host into viewing a specially...

CVE-2012-5635

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by 1 tests/volume.rc, 2 extras/hook-scripts/S30samba-stop.sh, and possibly other vectors,...

CVE-2012-5635

The CVE-2012-5635 entry concerns GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0. It is caused by a symlink-based attack that lets local users overwrite arbitrary files via multiple temporary files (e.g., tests/volume.rc, extras/hook-scripts/S30sam...

CVE-2012-5635: Undefined Security Weakness

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by 1 tests/volume.rc, 2 extras/hook-scripts/S30samba-stop.sh, and possibly other vectors,...

CVE-2013-2741: Improper Authentication

importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive information, or overwrite or delete files, via vectors involving a 1 direct request, 2 step=1 request,...

McAfee Virtual Technician ActiveX 控件'Save()'方法文件覆盖漏洞

BUGTRAQ ID: 58750 CVECAN ID: CVE-2012-5879 McAfee Virtual Technician是分析诊断工具。 McAfee Virtual Technician 6.5.0.2101及其他版本的ActiveX控件存在安全漏洞可导致攻击者覆盖或创建受影响应用上下文内的任意文件。该安全漏洞存在于"McHealthCheck.dll"的"Save"方法。 0 McAfee Virtual Technician 6.5.0.2101 厂商补丁： McAfee ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

GlusterFS: insecure temporary file creation

Multiple insecure temporary file creation flaws were found in Red Hat Storage. A local user on the Red Hat Storage server could use these flaws to cause arbitrary files to be overwritten as the root user via a symbolic link attack...

Samba < 2.0.10 Remote Arbitrary File Overwrite

Binary data 1338.prm...

AIX 7.1 TL 1 : bos.rte.odm (U848045)

The remote host is missing AIX PTF U848045, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

AIX 6.1 TL 6 : bos.rte.odm (U850143)

The remote host is missing AIX PTF U850143, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Pidgin 'libpurple' 任意文件覆盖漏洞(CVE-2013-0271)

BUGTRAQ ID: 57952 CVECAN ID: CVE-2013-0271 Pidgin是一款多合一世界主流即时通讯软件集成工具。 Pidgin 2.10.7之前版本libpurple中MXit protocol插件存在安全漏洞，允许攻击者通过特制的mxit或mxit/imagestrips路径名创建或覆盖文件。 0 Pidgin 2.x 厂商补丁： Pidgin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.pidgin.im/news/security/...

Code injection

1 installer/basedefs.py and 2 modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...

CVE-2013-0261

CVE-2013-0261 concerns PackStack/openstack-packstack. A local attacker can exploit a symlink attack during manifest creation to overwrite arbitrary files in /tmp, potentially affecting files the invoking user can access and, per Red Hat advisory, could lead to denial of service and manipulation o...