72 matches found
Session fixation
debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...
Apache Tomcat: Multiple vulnerabilities
Background Apache Tomcat is a Servlet-3.0/JSP-2.2 Container. Description Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details. Impact The vulnerabilities allow an attacker to cause a Denial of Service, to hijack a session, ...
USN-1399-1: gdm-guest-session vulnerability
Ryan Lortie discovered that gdm-guest-session improperly cleaned out certain guest session files. A local attacker could use this issue to delete arbitrary files...
HP OpenView Communication Broker arbitrary files deletion
Arbitrary files deletion via TCP/383 service...
Arbitrary files deletion in HP OpenView Communication Broker
Luigi Auriemma Application: HP OpenView Communication Broker http://www8.hp.com/us/en/software/enterprise-software.html Versions: ovbbccb.exe = 11.0.43.0 Platforms: Windows, Linux, Solaris, HP-UX, AIX Bug: arbitrary files deletion Exploitation: remote, versus server Date: 27 Jun 2011 found 01 Jun...
Arbitrary files deletion in HP OpenView Performance Agent
Luigi Auriemma Application: HP OpenView Performance Agent http://www8.hp.com/us/en/software/software-product.html?compURI=tcm:245-937022 Versions: ovbbccb.exe = 6.20.50.0 Platforms: Windows, Linux, Solaris, HP-UX, AIX Bug: arbitrary files deletion Exploitation: remote, versus server Date: 27 Jun...
Apache Tomcat multiple security vulnerabilities
Files deletion, weak permissions after re-installation...
RealPlayer multiple security vulnerabilities
Buffer overflow on SWF files parsing. ActiveX memory corruption. ActiveX arbitrary files deletion...
asg-sentry 7.0.0 - Multiple Vulnerabilities
Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provide you with full visibility to your network...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. WordPress: DoS, crossite scripting, arbitrary files deletion...
SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client
SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...