CVE-2011-3630

Removed by vendor...

PT-2019-6683

Name of the Vulnerable Software and Affected Versions Hardlink versions prior to 0.1.2 Description The issue arises from multiple integer overflows that lead to heap-based buffer overflows due to the way string lengths are concatenated in the calculation of the required memory space. A remote...

CVE-2011-3632: Improper Link Resolution Before File Access

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...

CVE-2011-3630: Out-of-bounds Write

Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink...

CVE-2011-3631: Integer Overflow or Wraparound

Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local us...

PT-2019-6684

Name of the Vulnerable Software and Affected Versions Hardlink versions prior to 0.1.2 Description The issue allows a local attacker to conduct symlink attacks because it operates on full file system objects path names. Recommendations For versions prior to 0.1.2, update to version 0.1.2 or later...

PT-2019-6682

Name of the Vulnerable Software and Affected Versions hardlink versions prior to 0.1.2 Description The issue arises from the way hardlink processes directory trees with deeply nested directories, leading to multiple stack-based buffer overflow flaws. A remote attacker could provide a...

Microsoft Windows AppXsvc Deployment Extension Privilege Escalation

Exploit Title: Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation Date: 2019-11-22 Exploit Author: Abdelhamid Naceri Vendor Homepage: www.microsoft.com Tested on: Windows 10 1903 CVE : CVE-2019-1385 Windows: "AppX Deployment Service" AppXSVC elevation of privilege vulnerability...

PT-2019-4024

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to errors in hardlink checking when extracting archived files, which can be exploited by a remote attacker to modify arbitrary files. This can be achieved...

CheckPoint Endpoint Security ClientZoneAlarm 15.4.062.17802 - Privilege Escalation

CheckPoint Endpoint Security ClientZoneAlarm 15.4.062.17802 - Privilege Escalation Exploit Title: CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation Date: 2019-01-30 Exploit Author: Jakub Palaczynski Vendor Homepage: https://www.checkpoint.com/ Version: Check Poin...

CVE-2019-11736: Concurrent Execution using Shared Resource with Improper Synchronization

The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during...

PT-2019-6061

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 69 Firefox ESR versions prior to 68.1 Description The issue is caused by errors in synchronization when using a shared resource in the Mozilla Maintenance Service of Firefox ESR and Firefox browsers. This can allow an...

CVE-2018-20990

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

CVE-2018-20990

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

Design/Logic Flaw

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

CVE-2018-20990

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

UBUNTU-CVE-2018-20990

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

CVE-2018-20990

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

CVE-2018-20990

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...

CVE-2018-20990

CVE-2018-20990 affects the tar crate for Rust (pre-0.4.16). The issue is that arbitrary file overwrite can occur via a symlink or hardlink inside a TAR archive, representing a path traversal-like risk when unpacking archives. The available documents identify the vulnerable component and the under...