93 matches found
Design/Logic Flaw
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory ...
CVE-2018-11345
An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filename. This can be used to place attacker controlled code on the file system that can then be executed. Further, the filename parameter is...
Updated rpm package fixes security vulnerabilities
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory ...
Scale-Out Backup Repository Free Space Calculation
Challenge Jobs running to a Scale-Out Backup Repository report "No scale-out repository extents have sufficient disk space to store the backup file, " even though some of the extents have adequate free space. Cause At the beginning of a job, if no other jobs are running, Veeam Backup & Replicatio...
CVE-2014-6256
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public 1 read or 2 execute access via a move action, aka ZEN-15386...
Fedora 18 : pgbouncer-1.5.3-1.fc18 (2012-17507)
Update to 1.5.3, which also fixes bz 872527. - Add mkauth.py among installed files. - Move pgbouncer.ini under /etc/pgbouncer directory. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Nginx 0.7.61 - WebDAV Directory Traversal
Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...
Microsoft FTP client directory traversal
It's possible to place downloaded file in any directory from server side...
CVE-2002-1139
The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target...
Real player directory traversal
Directory traversal in .rjs files allows to place file in any directory...
Adobe Acrobat does not adequately validate Acrobat JavaScript
Overview Adobe Acrobat contains a vulnerability in its JavaScript parsing engine that could allow an attacker to place arbitrary files on the local file system. Description Different versions of Adobe Acrobat software can create, modify, and read Portable Document Format PDF files. Acrobat...
CVE-2001-1258
Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...