566 matches found
Path traversal
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...
CVE-2011-3632
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...
CVE-2011-3632
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...
CVE-2011-3632
CVE-2011-3632 affects the hardlink utility prior to version 0.1.2, where operations on full filesystem object path names enable local attackers to perform symlink attacks. The provided documents do not specify affected distributions, exact vulnerable files, or a confirmed patch/mitigation. No exp...
CVE-2011-3632
Removed by vendor...
CVE-2011-3631
Removed by vendor...
CVE-2011-3631
CVE-2011-3631 describes a vulnerability in hardlink before 0.1.2 where multiple integer overflows lead to heap-based buffer overflows during memory space calculation due to how string lengths are concatenated. A remote attacker could craft a directory tree and persuade a local user to consolidate...
CVE-2011-3631
Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local us...
CVE-2011-3630
CVE-2011-3630 concerns the hardlink project prior to version 0.1.2, which is affected by multiple stack-based buffer overflow flaws when processing deeply nested directory trees. According to the connected NVD entry, a remote attacker can craft a directory tree and trick the local user into conso...
CVE-2011-3630
Removed by vendor...
CVE-2011-3630
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink...
CVE-2011-3630: Out-of-bounds Write
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink...
CVE-2011-3631: Integer Overflow or Wraparound
Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local us...
CVE-2011-3632: Improper Link Resolution Before File Access
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...
Microsoft Windows AppXsvc Deployment Extension Privilege Escalation
Exploit Title: Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation Date: 2019-11-22 Exploit Author: Abdelhamid Naceri Vendor Homepage: www.microsoft.com Tested on: Windows 10 1903 CVE : CVE-2019-1385 Windows: "AppX Deployment Service" AppXSVC elevation of privilege vulnerability...
CheckPoint Endpoint Security ClientZoneAlarm 15.4.062.17802 - Privilege Escalation
CheckPoint Endpoint Security ClientZoneAlarm 15.4.062.17802 - Privilege Escalation Exploit Title: CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation Date: 2019-01-30 Exploit Author: Jakub Palaczynski Vendor Homepage: https://www.checkpoint.com/ Version: Check Poin...
CVE-2019-11736: Concurrent Execution using Shared Resource with Improper Synchronization
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during...
CVE-2018-20990
An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...
