CVE-2011-2765 Insecure temporary file handling

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks...

PT-2018-5106

Name of the Vulnerable Software and Affected Versions katello-debug versions prior to 3.4.0 Description A flaw was found in katello-debug where certain scripts and log files used insecure temporary files, allowing a local user to conduct a symbolic-link attack and overwrite the contents of...

CVE-2016-9595: Insecure Temporary File

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...

USN-3721-1 ant vulnerability

Danny Grander discovered that Apache Ant incorrectly handled certain compressed files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to overwrite arbitrary files...

CVE-2018-0349: Improper Input Validation

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the request admin-tech command in the CLI of the affected...

PT-2018-8777

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution versions prior to 18.3.0 vBond Orchestrator Software versions prior to 18.3.0 vEdge 100 Series Routers versions prior to 18.3.0 vEdge 1000 Series Routers versions prior to 18.3.0 vEdge 2000 Series Routers versions prior t...

CVE-2018-14329

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

CVE-2018-14329: Improper Link Resolution Before File Access

In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...

PT-2018-12444

Name of the Vulnerable Software and Affected Versions HTSlib version 1.8 Description A race condition exists in the cram/cram io.c file of HTSlib, potentially allowing local users to overwrite arbitrary files via a symlink attack. Recommendations For HTSlib version 1.8, consider restricting acces...

Updated w3m packages fix security vulnerability

It was discovered that w3m incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service CVE-2018-6196, CVE-2018-6197. It was discovered that w3m incorrectly handled temporary files. An attacker could possibly use this to overwrite arbitrary files...

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

PT-2018-8859

Name of the Vulnerable Software and Affected Versions DFArc versions prior to 3.14 DFArc2 versions prior to 3.14 Dink Smallwood HD versions prior to 3.14 Description The issue is related to directory traversal in the D-Mod extractor, which can be exploited by an attacker to overwrite arbitrary...

CVE-2017-7767

The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows Updater, which runs with the Maintenance Service's privileged access. Note: This attack requires local system access and only affects Windows. Other operati...

PT-2018-2303

Name of the Vulnerable Software and Affected Versions Perl versions through 5.26.2 Description The issue is related to the Archive::Tar module in Perl, which has a flaw in its directory-traversal protection mechanism. This flaw allows remote attackers to bypass the protection and overwrite...

CVE-2018-1002100: Improper Input Validation

In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files...

CVE-2018-1495: Improper Privilege Management

IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitrary files which could cause a denial of service. IBM X-Force ID: 141148...

PT-2018-12825

Name of the Vulnerable Software and Affected Versions IBM FlashSystem versions affected versions not specified Description The issue allows an authenticated attacker with specialized access to overwrite arbitrary files, potentially causing a denial of service. Recommendations At the moment, there...

PT-2018-12545

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description The issue allows a local user to overwrite arbitrary files owned by the DB2 instance owner. Recommendations For versions 9.7 through 11.1,...

PT-2018-12561

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description The issue allows a local user to overwrite arbitrary files owned by the DB2 instance owner. Recommendations For versions 9.7 through 11.1,...

PT-2018-12549

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description The issue allows a local user to overwrite arbitrary files owned by the DB2 instance owner. Recommendations For versions 9.7 through 11.1,...