658 matches found
OpenSSH 1.2 - .scp File CreateOverwrite
OpenSSH 1.2 - .scp File CreateOverwrite source: https://www.securityfocus.com/bid/1742/info A vulnerability exists in the 1.2.x releases of scp which, if properly exploited using a modified scp binary on the server end, can permit the remote server to spoof local pathnames and overwrite files...
Дырка в tnef
При извлечении данных из MS-TNEF-файлов не проверяется наличие служебных символов в имени файла, что позволяет переписать любой файл, принадлежащий пользователю...
Security Bulletin (MS00-042)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Patch Available for "Active Setup Download" Vulnerability Originally Posted: June 29,...
CISADV000524b.txt
Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...
Security Advisory: FreeBSD-SA-00:16.golddig
============================================================================= FreeBSD-SA-00:16 Security Advisory FreeBSD, Inc. Topic: golddig port allows users to overwrite local files Category: ports Module: golddig Announced: 2000-05-09 Credits: Discovered during internal ports collection...
x11amp.txt
Vulnerability: Any user can overwrite any file in the system. title=x11amp ver .70 authors=Mikael Alm, Thomas Nilsson, Olle Hallnas system=any that run this version [email protected] Grampa Elite Overview: To start out with I am pretty sure that I am not the one that has found this...
CVE-1999-0370
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files...
CVE-1999-0049
CVE-1999-0049 affects Csetup on IRIX. The documented impact is arbitrary file creation or overwriting via Csetup. The provided sources do not specify root cause details or affected versions; remediation information is not included. Metrics in the NVD entry indicate high impact across confidential...
CVE-1999-0081
The provided OpenVAS entries confirm a remote vulnerability in wu-ftpd where the rnfr command can overwrite arbitrary files on the server. The root cause is a flaw in handling the RNFR sequence that enables a remote attacker to overwrite files, potentially impacting integrity (I:P) with no confid...
CVE-1999-0164
A race condition in the Solaris ps command allows an attacker to overwrite critical files...
CVE-1999-0081
wu-ftp allows files to be overwritten via the rnfr command...
netscape.4.5.talkback.txt
Date: Fri, 19 Mar 1999 22:45:02 -0800 From: Aleph One To: [email protected] Subject: Security hole in Netscape Communicator's 4.5 "talkback" function SuSE Security Announcement Package: netscape-4.5-9 Date: Thu Mar 18 10:22:11 CET 1999 Affected: unix operating systems using netscape communicat...
Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation
Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation // source: https://www.securityfocus.com/bid/300/info KMail is a mail user agent that comes with the kdenetwork package, part of the K Desktop Environment. A vulnerability in the way KMail...
ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink
ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink source: https://www.securityfocus.com/bid/80/info The named daemon will dump the named database to /var/tmp/nameddump.db when it receives a SIGINT signal. It does not check for symbolic links while doing so and can be made to overwrite any file in...
CVE-1999-0190
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access...
CVE-1999-0320
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files...
PT-1997-1029 · Sgi · Csetup
Name of the Vulnerable Software and Affected Versions: Csetup under IRIX affected versions not specified Description: The issue allows for arbitrary file creation or overwriting. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...