PT-2012-3921

Name of the Vulnerable Software and Affected Versions EMC Celerra Network Server versions 6.x before 6.0.61.0 VNX versions 7.x before 7.0.53.2 VNXe versions 2.0 and 2.1 before 2.1.3.19077 VNXe version 2.2 before 2.2.0.19078 Description The issue is related to improper implementation of NFS access...

CVE-2012-2282: Undefined Security Weakness

EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 aka MR1 SP3.2 and 2.2 before 2.2.0.19078 aka MR2 SP0.2 do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a 1 NFSv2, 2...

IBM WebSphere Application Server Multiple Vulnerabilities

The version of IBM WebSphere application server running on the remote host is potentially affected by multiple vulnerabilities : - An insecure file permission vulnerability that only affects WebSphere Application Server running on the IBM i platform. A local attacker may be able to exploit this...

PT-2012-1512

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.43 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.21 IBM WebSphere Application Server WAS versions 8.0 before 8.0.0.2 Description The issue allows local users to re...

CVE-2011-4001: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to read and modify arbitrary files via unspecified vectors...

CVE-2011-3993

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified...

Design/Logic Flaw

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified...

CVE-2011-3993

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified...

PT-2011-4805

Name of the Vulnerable Software and Affected Versions MTCMS versions prior to 5.252 MultiFileUploader plugin for Movable Type version 0.44 and earlier DuplicateEntry plugin for Movable Type version 1.2 and earlier MailPack plugin for Movable Type version 1.741 and earlier AutoTagging plugin for...

CVE-2011-2481: Undefined Security Weakness

Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the 1 web.xml, 2 context.xml, or 3 tld files of arbitrary web applications via a crafted application that is loaded earlier than the targ...

FTP Service AUTH TLS Plaintext Command Injection

The remote FTP server contains a software flaw in its AUTH TLS implementation that could allow a remote, unauthenticated attacker to inject commands during the plaintext protocol phase that will be executed during the ciphertext protocol phase. Successful exploitation could permit an attacker to...

Design/Logic Flaw

ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine...

CVE-2011-0402

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory...

CVE-2010-3028

The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions 777 in unspecified folders, which allows local users to modify, create, or delete certain files...

CVE-2010-3028

The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions 777 in unspecified folders, which allows local users to modify, create, or delete certain files...

Rsync File Handling Integer Overflow (CVE-2003-0962)

RSync is an open source utility that provides fast incremental file transfer. There exists a heap overflow vulnerability in the Rsync server. The flaw is caused by an insufficient boundary checks when handling malformed requests. Successful exploitation would allow the attacker to overwrite, crea...

CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

DEBIAN-CVE-2010-0396

Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive...

JRE applet launcher vulnerability

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

Directory traversal

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...