CVE-2012-6348: Improper Link Resolution Before File Access

Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to 1 overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file, or 2 overwrite arbitrary files and consequently gain privileges via a symlink attack on the...

CVE-2012-6080

Directory traversal vulnerability in the doattachmentmove function in the AttachFile action action/AttachFile.py in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name...

CVE-2012-6495

Multiple directory traversal vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged wi...

PT-2013-1959

Name of the Vulnerable Software and Affected Versions MoinMoin versions prior to 1.9.6 Description The issue allows remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. This can potentially be leveraged to execute arbitrary code. Recommendations...

CVE-2012-6080: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the doattachmentmove function in the AttachFile action action/AttachFile.py in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name...

PT-2013-1876

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.9.3 through 1.9.5 Description The issue allows remote attackers to overwrite arbitrary files via a .. dot dot in a file name, due to a directory traversal vulnerability in the do attachment move function in the AttachFile...

CVE-2012-3329: Improper Link Resolution Before File Access

IBM Advanced Settings Utility ASU through 3.62 and 3.70 through 9.21 and Bootable Media Creator BoMC through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a 1 temporary file or 2 log file...

CVE-2012-5530

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

CVE-2012-5530: Undefined Security Weakness

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

PT-2012-6005

Name of the Vulnerable Software and Affected Versions Performance Co-Pilot PCP versions prior to 3.6.10 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file. This is due to a vulnerability in the pcmd and pmlogger init scripts...

CVE-2012-4417: Undefined Security Weakness

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...

PT-2012-4768

Name of the Vulnerable Software and Affected Versions crypto-utils version 2.4.1-34 Description The issue allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory, specifically through the nssconfigFound function in genkey.pl in...

PT-2012-5950

Name of the Vulnerable Software and Affected Versions xdiagnose versions prior to 2.5.2ubuntu0.1 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp. Recommendations For versions prior to 2.5.2ubuntu0.1,...

PT-2012-1872

Name of the Vulnerable Software and Affected Versions Proc::ProcessTable module version 0.45 Description The issue allows local users to overwrite arbitrary files via a symlink attack on /tmp/TTYDEVS when TTY information caching is enabled in the ProcessTable.pm module for Perl. Recommendations F...

PT-2012-5902

Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon version 0.9.3 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a PID file. This can be achieved by using a pathname different from the default /var/run/monkey.pid pathname...

CVE-2012-3305: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file...

PT-2012-4639

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.25 IBM WebSphere Application Server versions 8.0 before 8.0.0.5 IBM WebSphere Application Server versions 8.5 before 8.5.0...

CVE-2011-5146

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

CVE-2011-5146: Improper Link Resolution Before File Access

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

PT-2012-2124

Name of the Vulnerable Software and Affected Versions Bokken versions prior to 1.6 Bokken versions 1.5-x prior to 1.5-3 Description The issue allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot. Recommendations For versions prior to 1.6, update to version 1.6 or...