CVE-2007-5860

Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, involving an "insecure file operation."...

CVE-2007-4701

WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file...

DTSA-74-1 hugin - insecure temp file handling

Bulletin has no description...

SKK Tools: Insecure temporary file creation

Background SKK is a Japanese input method for Emacs. Description skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact A local attacker could create symbolic links in the directory where the temporary files ar...

Vba32 Personal Antivirus不安全文件权限本地特权提升漏洞

Vba32 Personal Antivirus是一款反病毒应用程序。 Vba32 Personal Antivirus 不安全设置目录文件权限，本地攻击者可以利用漏洞提升特权。 由于默认的安装目录设置全局可写，因此通过删除，操作和替代应用程序文件可导致特权提升。 VirusBlokAda Vba32 Personal 3.12.2 VirusBlokAda VBA32 升级到最新程序： http://www.anti-virus.by/en/personal.html...

NVIDIA drivers: Denial of service

Background The NVIDIA drivers provide support for NVIDIA graphic boards. Description Gregory Shikhman discovered that the default Gentoo setup of NVIDIA drivers creates the /dev/nvidia with insecure file permissions. Impact A local attacker could send arbitrary values into the devices, possibly...

Symantec Discovery Insecure File Permissions

SUMMARY Insecure default directory and file permissions may allow local users to gain escalated privileges. Severity Low Remote Access | Local network access required ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Produ...

articledir-rfi.txt

dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace...

Microsoft Windows Vista/2003/XP/2000 file management security issues

Title: Microsoft Windows Vista/2003/XP/2000 file management security issues Author: 3APA3A, http://securityvulns.com/ Vendor: Microsoft and potentially another vendors Products: Microsoft Windows Vista/2003/XP/2000, Microsoft resource kit for Windows 2000 and different utilities. Access Vector:...

GLSA-200706-05 : ClamAV: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200706-05 ClamAV: Multiple Denials of Service Several vulnerabilities were discovered in ClamAV by various researchers: Victor Stinner INL discovered that the OLE2 parser may enter in an infinite loop CVE-2007-2650. A boundary err...

CVE-2007-2149

Chatness 2.5.3 and earlier is affected. The issue arises from storing usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, with the recommendation of file permissions 0666 or 0777. This enables local users to read credential data and may allow remote attackers...

LSAT: Insecure temporary file creation

Background The Linux Security Auditing Tool LSAT is a post install security auditor which checks many system configurations and local network settings on the system for common security or configuration errors and for packages that are not needed. Description LSAT insecurely writes in /tmp with a...

edittag12-xss.txt

Script: EditTag Version: 1.2 Author: Greg Billock [email protected] Discoverer: NetJackal nima5014TyAhooD0Tcom - nj4ThackerzD0Tir I am sorry for my BAD English. Description: 1 Local file injection: An attacker can use edittag.cgi or edittagmp.cgi maybe .pl to inject files ex. /etc/passwd...

phpcms 3.0.0文件上传漏洞

漏洞文件: ads/upload.php、uppic.php require PHPCMSROOT."/class/upload.php"; if!$userid message"请您先登录或注册！" , PHPCMSPATH."member/login.php"; if$extid==1 $upfiletype= "jpg|png|gif"; elseif $extid==2 $upfiletype= "swf"; if$action=='upload' $fileArr = array 'file'=$uploadfile, 'name'=$uploadfilename,...

Debian DSA-1208-1 : bugzilla - several vulnerabilities

Several remote vulnerabilities have been discovered in the Bugzilla bug tracking system, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4534 Javier Fernandez-Sanguino Pena discovered that insecure...

iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability

Cisco Secure Desktop Privilege Escalation Vulnerability iDefense Security Advisory 11.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 08, 2006 I. BACKGROUND Cisco Secure Desktop allows secure VPN connections from remote PCs and offers functionality to ensure PCs meet administrato...

Debian DSA-927-2 : tkdiff - insecure temporary file

The last update of tkdiff contained a programming error which is fixed by this version. For completeness we're adding the original advisory text : Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that tkdiff, a graphical side by side 'diff' utility, creates tempora...

Debian DSA-1062-1 : kphone - insecure file creation

Sven Dreyer discovered that KPhone, a Voice over IP client for KDE, creates a configuration file world-readable, which could leak sensitive information like SIP passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Debian DSA-907-1 : ipmenu - insecure temporary file

Akira Yoshiyama noticed that ipmenu, an cursel iptables/iproute2 GUI, creates a temporary file in an insecure fashion allowing a local attacker to overwrite arbitrary files utilising a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2006-4493

xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information...