762 matches found
PT-2018-12555
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description The issue allows a local user to overwrite arbitrary files owned by the DB2 instance owner. Recommendations For versions 9.7 through 11.1,...
CVE-2018-1450: Undefined Security Weakness
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140045...
CVE-2018-1449: Undefined Security Weakness
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140044...
CVE-2018-1451: Undefined Security Weakness
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046...
PT-2018-11315
Name of the Vulnerable Software and Affected Versions Cloud Foundry Cloud Controller versions prior to 1.52.0 Description The issue allows an authenticated malicious user to predict the location of application blobs and leverage path traversal to create a malicious application. This malicious...
CVE-2018-1266: Improper Limitation of a Pathname to a Restricted Directory
Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the location of application blobs and leverage path traversal to create a malicious application that has the ability to overwri...
CVE-2018-1448: Undefined Security Weakness
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 includes DB2 Connect Server contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043...
CVE-2018-7441
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrated by /tmp/junksplitimage.ps in prog/splitimage2pdf.c...
CVE-2018-6198
w3m through 0.5.3 does not properly handle temporary files when the /.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files...
CVE-2018-6198: Improper Link Resolution Before File Access
w3m through 0.5.3 does not properly handle temporary files when the /.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files...
PT-2018-17403
Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3 Description The issue arises from improper handling of temporary files when the /.w3m directory is unwritable. This allows a local attacker to potentially craft a symlink attack, enabling them to overwrite arbitrary...
PT-2017-14485
Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to overwrite arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...
PT-2017-14488
Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to overwrite arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...
PT-2017-12850
Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue allows a local attacker to launch a symlink attack. This is possible because the IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacke...
instack-undercloud: uses hardcoded /tmp paths
A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...
PT-2017-17328
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the USB-modem code could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The iss...
CVE-2017-6795: Improper Input Validation
A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper inpu...
instack-undercloud: uses hardcoded /tmp paths
A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...
CVE-2017-1000026: Improper Limitation of a Pathname to a Restricted Directory
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...