EUVD-2007-2636

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

CVE-2007-2644: Undefined Security Weakness

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/11/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------- bMorovia Barcode ActiveX Professiona...

Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite

Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite 2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinna...

Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite

2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This...

Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite

Exploit for unknown platform in category remote exploits ====================================================================== Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite ====================================================================== 2007/05/11...

Integer overflow

Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files aka "time-of-check-time-of-use file race". NOTE: the researcher has retracted the original advisory, stating that "th...

CVE-2007-2056

AFFLIB (AFFLIB) vulnerability CVE-2007-2056 affects the getlock function in aimage/aimage.cpp, with a time-of-check-to-time-of-use file race that could allow a local attacker to overwrite an arbitrary file. The issue is reported for AFFLIB versions 2.2.8 and earlier. The race condition occurs whe...

CVE-2007-2058

CVE-2007-2058 = Directory traversal in Acubix PicoZip 4.02. Processing archives (GZ, TAR, RAR, JAR, ZIP) allows a user-assisted remote attacker to overwrite arbitrary files via a .. sequence in file paths within the archive. Based on NVD metrics, impact is partial confidentiality, integrity, and ...

DEBIAN-CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2007-1799

CVE-2007-1799 affects KTorrent prior to 2.1.3. A directory traversal vulnerability exists in torrent.cpp where only the string ".." is checked; manipulated ".." sequences in torrent filenames (e.g., "../") can allow a remote attacker to overwrite arbitrary files. This stems from an incomplete fix...

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-1500: Undefined Security Weakness

The Linux Security Auditing Tool LSAT allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat...

CVE-2007-0237: Undefined Security Weakness

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Code injection

netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug...

CVE-2007-1444

netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug...

CVE-2007-1444: Undefined Security Weakness

netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug...

CVE-2007-1437

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...

CVE-2007-1437

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...