1448 matches found
CVE-2004-0233
Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...
Arbitrary file overwriting in Unreal engine through UMOD
Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...
SCSA028.txt
================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...
[SCSA-028] Nuked-Klan Multiple Vulnerabilities
================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...
Multiple vulnerabilities in sysstat
Background sysstat is a package containing a number of performance monitoring utilities for Linux, including sar, mpstat, iostat and sa tools Description There are two vulnerabilities in the way sysstat handles symlinks: 1. The isag utility, which displays sysstat data in a graphical format,...
Insecure sandbox temporary lockfile vulnerabilities in Portage
Background Portage is Gentoo's package management system which is responsible for installing, compiling and updating any ebuilds on the system through the Gentoo rsync tree. Under default configurations, most ebuilds run under a sandbox which prevent the build process writing to the "real" system...
DSA-460 sysstat - insecure temporary file
Bulletin has no description...
CVE-2004-0058
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pidantivir$$ temporary file...
CVE-2004-0059
Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. dot dot sequences in the filename parameter of a Content-Disposition: header...
CVE-2003-0924
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
Multiple vulnerabilities in WWW Fileshare Pro <= 2.42
Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: = 2.42 Platforms: Windows Bugs: - arbitrary server's files overwriting - remote crash - directory authorization bypass Risk: critical Exploitation: remote Date: 14 Jan 2004 Author: Luigi Auriemma e-mail:...
CVE-2003-1310
The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...
CVE-2003-0878
slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875...
CVE-2003-0537
The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users...
Shattering SEH II
========================================================================= = Shattering SEH II = = [email protected] = http://www.security-assessment.com = = Originally posted: July 28, 2003 ========================================================================= == Background =...
CVE-2003-0381
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script...
[SECURITY] [DSA-343-1] New skk, ddskk packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 343-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...
Moderate: Red Hat Security Advisory: unzip security update
Updated unzip packages resolving a vulnerability allowing arbitrary files to be overwritten are now available. Updated 15 August 2003 Ben Laurie found that the original patch to fix this issue missed a case where the path component included a quoted slash. These updated packages contain a new pat...
InterSystems Cache 4.1.155.0.x - Insecure Default Permissions
InterSystems Cache 4.1.155.0.x - Insecure Default Permissions source: https://www.securityfocus.com/bid/8070/info It has been reported that the permissions set by default on the files and directories comprising InterSystems Cache are insecure. The permissions on directories allegedly allow for an...