680 matches found
xorg-server -- privilege escalation
Daniel Stone of X.Org reports: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute arbitrary code with root privileges, or cause a denial of service by overwriting files on the system, again with root...
Command injection
Adobe Graphics Server 2.0 and 2.1 formerly AlterCast and Adobe Document Server ADS 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the 1 saveContent...
CVE-2006-1063
Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox"...
WebCalendar < 1.0.2 Multiple Vulnerabilities
Binary data 3303.prm...
[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 835-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-2 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-2 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-1 [email protected] http://www.debian.org/security/ Martin Schulze May 25th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-1 [email protected] http://www.debian.org/security/ Martin Schulze May 25th, 2005 http://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: mysql-server security update
Updated mysql-server packages that fix several vulnerabilities are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL...
DSA-691-1 abuse - several
Bulletin has no description...
CVE-2005-0587
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...
CVE-2005-0161
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...
CVE-2005-0161
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...
GLSA-200501-43 : f2c: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200501-43 f2c: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that f2c creates temporary files in world-writeable directories with predictable names. Impact : A local...
GLSA-200501-42 : VDR: Arbitrary file overwriting issue
The remote host is affected by the vulnerability described in GLSA-200501-42 VDR: Arbitrary file overwriting issue Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that VDR accesses user-controlled files insecurely. Impact : A local attacker could create malicious lin...
CVE-2005-0365
The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
Perl: Vulnerabilities in perl-suid wrapper
Background Perl is a stable, cross-platform programming language created by Larry Wall. The perl-suid wrapper allows the use of setuid perl scripts, i.e. user-callable Perl scripts which have elevated privileges. This function is enabled only if you have the perlsuid USE flag set. Description...
