1509 matches found
CVE-2007-2519
Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the 1 install-as attribute in the file element in package.xml 1.0 or the 2 as attribute in the install element in package.xm...
CVE-2009-5079
The 1 gendef.sh, 2 doc/fixinfo.sh, and 3 contrib/gdiffmk/tests/runtests.in scripts in GNU troff aka groff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro.tmp or /tmp/ temporary file...
CVE-2004-1377
The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-1296
The 1 eqn2graph and 2 pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
Ubuntu 14.04 LTS : NTP vulnerabilities (USN-2783-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2783-1 advisory. Aleksis Kauppinen discovered that NTP incorrectly handled certain remote config packets. In a non-default configuration, a remote authenticated attacker...
Multiple FireEye Product 'extract_ar.py' Directory Traversal Vulnerabilities
FireEye is a well-known American cybersecurity company. A directory traversal vulnerability exists in the implementation of multiple FireEye products. A remote attacker could exploit this vulnerability to create or overwrite arbitrary files in the user's context...
CVE-2013-0261
1 installer/basedefs.py and 2 modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...
Updated libvdpau packages fix security vulnerabilities
Updated libvdpau packages fix security vulnerabilities: libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files CVE-2015-5198...
ppc64-diag: multiple temporary file races
Multiple insecure temporary file use flaws were found in the way the ppc64-diag utility created certain temporary files. A local attacker could possibly use either of these flaws to perform a symbolic link attack and overwrite arbitrary files with the privileges of the user running ppc64-diag, or...
GNU patch directory traversal vulnerability
GNU patch is a part of the GNU project that updates the original file to the patched version. GNU patch suffers from a directory traversal vulnerability due to the program failing to adequately filter user-supplied input. A remote attacker is allowed to exploit this vulnerability by traversing a...
SQL Buddy 'page' Parameter Directory Traversal Vulnerability
SQL Buddy is a nice lightweight ajax database management tool. A directory traversal vulnerability exists in SQL Buddy. A remote attacker can exploit this vulnerability by sending a specially crafted request with the directory traversal character '...' A remote attacker can exploit this...
didjvu and pdf2djvu Insecure Temporary File Creation Vulnerability
didjvu is a Python module, which uses a separate Kamera framework, foreground and background layers, and then into the DjVu file encoding. pdf2DjVu's main function is to djvu to pdf, is a command line djvu format, pdf format, inter-conversion tool. didjvu and pdf2djvu in the existence of security...
Logstash 1.4.2 Directory Traversal Vulnerability
Logstash versions 1.4.2 and prior are vulnerable to a directory traversal attack that allows an attacker to overwrite files on the server running Logstash. Summary: Logstash versions 1.4.2 and prior are vulnerable to a directory traversal attack that allows an attacker to over-write files on the...
QEMU 'net/slirp.c' Insecure Temporary File Creation Vulnerability
QEMU is an open source emulator software. QEMU version 2.3.0, a security vulnerability exists in the implementation of /net/slirp.c, which can be exploited by an attacker with local access rights to perform a symbolic link attack and overwrite arbitrary files in the context of the affected...
FUSE Local Elevation of Privilege Vulnerability
FUSE - Filesystem in Userspace, a Linux module for mounting certain network spaces, such as SSH, to the local filesystem, can be found on SourceForge. FUSE suffers from a local elevation of privilege vulnerability. A local attacker can exploit this vulnerability to overwrite arbitrary files using...
OpenJDK: jar directory traversal issues (Tools, 8064601)
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
jar: directory traversal vulnerability
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
kexec-tools: insecure use of /tmp/*$$* filenames
It was found that the module-setup.sh script provided by kexec-tools created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary files...
Google Android adb backup 'server/BackupManagerService.java' directory traversal vulnerability
Android is an operating system based on the Linux open kernel and is a mobile operating system announced by Google Inc. on November 5, 2007.ADB creates a backup of your Android device that exists on your computer. Google Android adb backup has a directory traversal vulnerability in its...
jar: directory traversal vulnerability
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...