CVE-2009-4015

Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitrary commands via shell metacharacters in filename arguments...

CVE-2009-2902

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename...

CVE-2009-2902

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename...

PT-2010-1277 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.0 through 5.5.28 Apache Tomcat versions 6.0.0 through 6.0.20 Description: The issue allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename. When deploying WAR file...

Stack overflow

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...

phpMyAdmin创建不安全文件和目录漏洞

BUGTRAQ ID: 37826 CVE ID: CVE-2008-7251,CVE-2008-7252 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin在创建临时目录时使用了完全可写的权限，在创建临时文件时使用了可预测的文件名。本地或远程攻击者可以非授权修改文件，或通过符号链接攻击获得权限提升。 phpMyAdmin 2.11.x 厂商补丁： phpMyAdmin ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

Fedora 12 : gcc-4.4.2-20.fc12 (2009-12813)

Tue Dec 22 2009 Jakub Jelinek 4.4.2-20 - fix MEMSIZE of reload created stack slots 548825, PR rtl-optimization/42429 - fix addition of one character long filenames in fastjar 549493 - Thu Dec 17 2009 Jakub Jelinek 4.4.2-18 - update from gcc-44-branch - PRs c++/42387 - another C++ virtual dtors...

Mozilla Firefox

The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...

Code injection

Microsoft Internet Information Services IIS 5.x and 6.x uses only the portion of a filename before a ; semicolon character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a filename with a 1 .asp, 2...

Design/Logic Flaw

Microsoft Internet Information Services IIS, when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : colon and a safe extension, as demonstrate...

CVE-2009-4445

Microsoft IIS, when used with unspecified third‑party upload applications, is vulnerable to remote file creation via a filename containing an initial extension, a colon, and a safe extension. For example, uploading a file named ".asp:.jpg" can result in an empty ".asp" file being created, related...

CVE-2009-4445

Microsoft Internet Information Services IIS, when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : colon and a safe extension, as demonstrate...

Microsoft IIS Filename Extension Parsing Security Bypass (CVE-2009-4444)

A security bypass vulnerability has been discovered in Microsoft Internet Information Services IIS. The vulnerability is due to an error in the IIS service that incorrectly parses filenames that contain a semicolon character when determining the MIME type based on the filename extension. An...

Picpuz 2.1.1 - Buffer Overflow (Denial of Service) (PoC)

Picpuz 2.1.1 - Buffer Overflow Denial of Service PoC Exploit Title: Picpuz Buffer Overflow DoS/PoC , http://kornelix.squarespace.com/storage/downloads/picpuz-2.1.1.tar.gz Version: = 2.1.1 Tested on: Fedora 12 CVE: None Code: Description: "from website" Picpuz is a free Linux "jigsaw puzzle"...

Printoxx Local Buffer Overflow

Exploit for unknown platform in category local exploits ============================== Printoxx Local Buffer Overflow ============================== Title: Printoxx Local Buffer Overflow CVE-ID: OSVDB-ID: Author: sandman Published: 2009-12-23 Verified: no view source print? Exploit Title: Printox...

Microsoft Internet Explorer image download spoofing

Microsoft Internet Explorer is a popular Web browser that supports image rendering within an HTML page. Internet Explorer also supports the saving of image resources to the local filesystem for offline viewing. A displayed image can be saved to local filesystem by selecting "Save Picture As" in t...

Yahoo! Messenger File Transfer Filename Spoofing (CVE-2005-0243)

Yahoo Messenger is a service providing instant messages, similar to MSN Messenger and ICQ. Yahoo! Messenger allows users to see when their friends come online, send instant messages, join chat rooms, and exchange files. There exists a vulnerability in the way Yahoo! Messenger displays file names ...