Race condition in periodic

Overview A race condition in the 'periodic' script allows local files to be overwritten. We believe that 'periodic' is typically used only with FreeBSD systems, though it may be installed on other systems. Description 'periodic' is a script used in conjunction with cron to execute jobs at specifi...

CVE-2000-0468

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

OpenSSH 1.2 - .scp File CreateOverwrite

OpenSSH 1.2 - .scp File CreateOverwrite source: https://www.securityfocus.com/bid/1742/info A vulnerability exists in the 1.2.x releases of scp which, if properly exploited using a modified scp binary on the server end, can permit the remote server to spoof local pathnames and overwrite files...

Дырка в tnef

При извлечении данных из MS-TNEF-файлов не проверяется наличие служебных символов в имени файла, что позволяет переписать любой файл, принадлежащий пользователю...

Security Bulletin (MS00-042)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Patch Available for "Active Setup Download" Vulnerability Originally Posted: June 29,...

CISADV000524b.txt

Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...

Security Advisory: FreeBSD-SA-00:16.golddig

============================================================================= FreeBSD-SA-00:16 Security Advisory FreeBSD, Inc. Topic: golddig port allows users to overwrite local files Category: ports Module: golddig Announced: 2000-05-09 Credits: Discovered during internal ports collection...

x11amp.txt

Vulnerability: Any user can overwrite any file in the system. title=x11amp ver .70 authors=Mikael Alm, Thomas Nilsson, Olle Hallnas system=any that run this version [email protected] Grampa Elite Overview: To start out with I am pretty sure that I am not the one that has found this...

CVE-1999-0370

In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files...

CVE-1999-0049

CVE-1999-0049 affects Csetup on IRIX. The documented impact is arbitrary file creation or overwriting via Csetup. The provided sources do not specify root cause details or affected versions; remediation information is not included. Metrics in the NVD entry indicate high impact across confidential...

CVE-1999-0081

wu-ftp allows files to be overwritten via the rnfr command...

CVE-1999-0081

The provided OpenVAS entries confirm a remote vulnerability in wu-ftpd where the rnfr command can overwrite arbitrary files on the server. The root cause is a flaw in handling the RNFR sequence that enables a remote attacker to overwrite files, potentially impacting integrity (I:P) with no confid...

CVE-1999-0164

A race condition in the Solaris ps command allows an attacker to overwrite critical files...

netscape.4.5.talkback.txt

Date: Fri, 19 Mar 1999 22:45:02 -0800 From: Aleph One To: [email protected] Subject: Security hole in Netscape Communicator's 4.5 "talkback" function SuSE Security Announcement Package: netscape-4.5-9 Date: Thu Mar 18 10:22:11 CET 1999 Affected: unix operating systems using netscape communicat...

Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation

Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation // source: https://www.securityfocus.com/bid/300/info KMail is a mail user agent that comes with the kdenetwork package, part of the K Desktop Environment. A vulnerability in the way KMail...

ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink

ISC BIND 4.9.7 -T1B - named SIGINT SIGIOT Symlink source: https://www.securityfocus.com/bid/80/info The named daemon will dump the named database to /var/tmp/nameddump.db when it receives a SIGINT signal. It does not check for symbolic links while doing so and can be made to overwrite any file in...

CVE-1999-0190

Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access...

CVE-1999-0320

SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files...

PT-1997-1029 · Sgi · Csetup

Name of the Vulnerable Software and Affected Versions: Csetup under IRIX affected versions not specified Description: The issue allows for arbitrary file creation or overwriting. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

CVE-1999-0164

A race condition in the Solaris ps command allows an attacker to overwrite critical files...