CVE-2011-1932

Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . dot characters in a pathname that is used for a file transfer in an Internet game...

PT-2011-3485

Name of the Vulnerable Software and Affected Versions Widelands versions prior to 15.1 Description A directory traversal issue exists, potentially allowing remote attackers to overwrite arbitrary files by utilizing . dot characters in a pathname used for file transfers in Internet games...

PT-2011-5022

Name of the Vulnerable Software and Affected Versions Widelands versions prior to 15.1 Description The pathname canonicalization functionality in Widelands does not properly restrict the use of leading tilde characters in strings received from the network, potentially allowing remote attackers to...

CVE-2011-1932: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . dot characters in a pathname that is used for a file transfer in an Internet game...

PT-2011-1084

Name of the Vulnerable Software and Affected Versions pure-FTPd version 1.0.22 pure-FTPd affected versions not specified, possibly other versions Description The issue allows local users to overwrite arbitrary files via unknown vectors when the Netware OES remote server feature is enabled. This c...

CVE-2011-3616: Improper Link Resolution Before File Access

The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf...

CVE-2011-3869

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file...

PT-2011-1169

Name of the Vulnerable Software and Affected Versions Puppet versions 2.7.x through 2.7.4 Puppet versions 2.6.x through 2.6.10 Puppet versions 0.25.x Description The issue allows local users to overwrite arbitrary files via a symlink attack on the .k5login file, potentially leading to disruption ...

CVE-2011-3869: Improper Link Resolution Before File Access

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file...

PT-2011-1159

Name of the Vulnerable Software and Affected Versions Conky versions prior to 1.8.1 Description The issue concerns a potential security risk in the Conky package, which could lead to the compromise of data integrity and availability. This can be exploited locally. Specifically, the getSkillname...

CVE-2011-2185

Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on 1 a /tmp/fab..tar file or 2 certain other files in the top level of /tmp/...

PT-2011-4011

Name of the Vulnerable Software and Affected Versions Check Point Multi-Domain Management / Provider-1 versions R65 through R75 Check Point SmartCenter affected versions not specified Description The issue allows local users on the MDS system to overwrite arbitrary files via unknown vectors durin...

CVE-2009-5081

The 1 config.guess, 2 contrib/groffer/perl/groffer.pl, and 3 contrib/groffer/perl/roff2.pl scripts in GNU troff aka groff 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary fil...

CVE-2009-5081

The 1 config.guess, 2 contrib/groffer/perl/groffer.pl, and 3 contrib/groffer/perl/roff2.pl scripts in GNU troff aka groff 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary fil...

CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2009-5079

The 1 gendef.sh, 2 doc/fixinfo.sh, and 3 contrib/gdiffmk/tests/runtests.in scripts in GNU troff aka groff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro.tmp or /tmp/ temporary file...

CVE-2009-5082: Improper Link Resolution Before File Access

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2009-5080: Improper Link Resolution Before File Access

The 1 contrib/eqn2graph/eqn2graph.sh, 2 contrib/grap2graph/grap2graph.sh, and 3 contrib/pic2graph/pic2graph.sh scripts in GNU troff aka groff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files...

CVE-2009-5081: Improper Link Resolution Before File Access

The 1 config.guess, 2 contrib/groffer/perl/groffer.pl, and 3 contrib/groffer/perl/roff2.pl scripts in GNU troff aka groff 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary fil...

CVE-2009-5079: Improper Link Resolution Before File Access

The 1 gendef.sh, 2 doc/fixinfo.sh, and 3 contrib/gdiffmk/tests/runtests.in scripts in GNU troff aka groff 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro.tmp or /tmp/ temporary file...