2474 matches found
mysql -- mysqlhotcopy insecure temporary file creation
According to Christian Hammers: mysqlhotcopy created temporary files in /tmp which had predictable filenames and such could be used for a tempfile run attack. Jeroen van Wolffelaar is credited with discovering the issue...
MPlayer: GUI filename handling overflow
Background MPlayer is a media player capable of handling multiple multimedia file formats. Description The MPlayer GUI code contains several buffer overflow vulnerabilities, and at least one in the TranslateFilename function is exploitable. Impact By enticing a user to play a file with a carefull...
CVE-2004-0377
Buffer overflow in the win32stat function for 1 ActiveState's ActivePerl and 2 Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character...
IPswitch WS_FTP buffer overflows
Buffer overflow on oversized filename then building local files list. Buffer overflow on oversized server banner...
Symlink vulnerabilities in mailmgr
--------------------------------------------------------- Title : Symlink vulnerabilities in mailmgr Bug finder : Marco van Berkum [email protected] Website : http://ws.obit.nl URL to mailmgr : http://web.onda.com.br/orso/mailmgr.html Tested version : Mailmgr-1.2.3 Date : 12 Feb 2004...
HP-UX shar utility creates files with predictable names in "/tmp" directory
Overview The shar program distributed with some versions of the HP-UX operating system creates files insecurely. This vulnerability could allow local users to gain escalated privilege on the system. Description shar is a program commonly available on UNIX systems to create a shell script that wil...
DEBIAN-CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771
Apache::Gallery (Gallery.pm) is vulnerable to local code execution due to predictable temporary filenames used when executing Inline::C. The underlying issue is the creation/modification race on temporary files before Apache::Gallery handles them. Affected component: Gallery.pm within Apache::Gal...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0771: Undefined Security Weakness
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities (1)
IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities 1 source: https://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exist...
IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities (2)
IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities 2 // source: https://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue...
University of Minnesota Gopherd 2.0.x/2.3/3.0.x - FTP Gateway Buffer Overflow
// source: https://www.securityfocus.com/bid/8167/info It has been reported that the FTP gateway component within the gopherd server is prone to a buffer overflow vulnerability. This vulnerability may be present due to a failure to perform bounds checking when processing long filenames returned...
Drag znd Zip buffer overflow
Buffer overflow during archieving of files with long filenames...
Coppermine Photo Gallery 1.0 - PHP Code Injection
source: https://www.securityfocus.com/bid/7300/info Coppermine Photo Gallery has been reported prone to PHP code injection attacks. Due to a lack of sufficient sanitization performed on user-supplied filenames that are uploaded into the Photo Gallery, an attacker may upload a malicious JPEG. The...
CVE-2002-0389
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...
CVE-2002-0389: Undefined Security Weakness
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...