CVE-2011-5136: Improper Input Validation

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter...

PT-2012-2114

Name of the Vulnerable Software and Affected Versions EPractize Labs Subscription Manager version 1.0 Description The issue allows remote attackers to overwrite arbitrary files. This is achieved via the db parameter in the showImg.php file. Recommendations For EPractize Labs Subscription Manager...

DEBIAN-CVE-2012-2103

The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...

CVE-2012-2103

The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...

PT-2012-3809

Name of the Vulnerable Software and Affected Versions Munin version 1.4.5 Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. This is related to the qmailscan plugin. Recommendations For Munin version 1.4.5, conside...

PT-2012-1280

Name of the Vulnerable Software and Affected Versions McAfee Common Management Agent CMA versions 3.5.5 through 3.5.5.588 McAfee Common Management Agent CMA versions 3.6.0 through 3.6.0.608 McAfee Agent versions prior to 4.0 Patch 3 Description The issue allows remote authenticated users to...

CVE-2012-3447

virt/disk/api.py in OpenStack Compute Nova 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an...

CVE-2012-3447: Undefined Security Weakness

virt/disk/api.py in OpenStack Compute Nova 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an...

CVE-2012-3440: Improper Link Resolution Before File Access

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux RHEL 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file...

CVE-2012-3361

virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image...

CVE-2012-3361

virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image...

PT-2012-4663

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2011.3 through 2012.2 Description The issue allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image. This is possible due to a flaw in the virt/disk/api.py modul...

CVE-2012-3361: Undefined Security Weakness

virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image...

PT-2012-6315

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2011.3 through 2012.2 Description The issue allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image. This is due to a problem in the virt/disk/api.py file...

Cross site scripting

The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these details are obtained from third party information. NOTE: it has been reported that this might only be...

CVE-2012-1989

telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise PE 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log /tmp/out.log...

PT-2012-1144

Name of the Vulnerable Software and Affected Versions Puppet versions prior to 2.7.13 Puppet Enterprise PE versions 1.2.x, 2.0.x, and 2.5.x prior to 2.5.1 Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely by an...

CVE-2012-2451

The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these details are obtained from third party information. NOTE: it has been reported that this might only be...

PT-2012-4054

Name of the Vulnerable Software and Affected Versions Config::IniFiles versions prior to 2.71 Description The issue allows local users to potentially overwrite arbitrary files via a symlink attack due to the creation of temporary files with predictable names. It has been reported that this might...

PT-2012-3860

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3, 6.1, and 7.1 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file, potentially leading to unauthorized data modification. This is related to the libodm.a component...