phpsquidpass: unauthorized user deleting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following design error in phpsquidpass: Details - ------- Product: phpsquidpass Affected Version: 0.11 and maybe all versions before Immune Version: 0.2 OS affected: all OS with php Vendor-URL:...

CVE-2002-0178

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands...

MIT PGP Public Key Server 0.9.2/0.9.4 - Search String Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP Public Key Server does not properly handle long search strings. Under some...

Multiple bugs in bzip2

Silent file overwritting, invalid symbolic link permissions inside archieves, etc...

Security Advisory FreeBSD-SA-02:25.bzip2

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:25 Security Advisory The FreeBSD Project Topic: bzip2 contains multiple security vulnerabilities Category: core/ports Module: bzip2 Announced: 2002-05-20 Credits: Volker...

CVE-2002-0157

Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file...

CVE-2001-1269

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' slash character...

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip pkzipc 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec recursive option via a .. dot dot attack on the archived files...

DCShop Beta 1.0 - Form Manipulation

DCShop Beta 1.0 - Form Manipulation source: https://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files...

CVE-2001-1120

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to 1 read or delete arbitrary files, or 2 overwrite ColdFusion Server templates...

CVE-1999-1565

Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

MIRC 2.x/3.x/4.x/5.x - Nick Buffer Overflow

// source: https://www.securityfocus.com/bid/4027/info mIRC is a popular Internet Relay Chat client whichs runs of Microsoft Windows 9x/ME/NT/2000/XP operating systems. A remote exploitable buffer overflow condition has been discovered in mIRC. This issue is due to improper bounds checking of...

FreeBSD 4.4 - AIO Library Cross Process Memory Write

// source: https://www.securityfocus.com/bid/3661/info aio.h is a library implementing the POSIX standard for asynchronous I/O. Support for AIO may be enabled in FreeBSD by compiling the kernel with the VFSAIO option. This option is not enabled in the default kernel configuration. Under some...

Tripwire vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview Tripwire is a file integrity verification utility for Unix and Linux operating systems. In some implementations, tripwire opens insecure temporary files with predictable names in publically-writable directories. Using a symbolic link attack, a local intruder may overwrite or create...

BSCW vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview BSCW is a groupware system that runs on a web server. BSCW follows symbolic links in tar files that it extracts into a user's local area. Accessing those links may allow the user to view arbitrary files viewable by the web server, and to overwrite files writable by the web server...

XMCD vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview xmcd is an x11/motif CD playing utility, in the public domain. cda, the command line interface to xmcd, executes with system administrator privileges. It is vulnerable to a symbolic link attack that may allow a local user to obtain administrator privileges. Description cda, the command...

CVE-2001-0744

Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file...

CVE-1999-1552

The CVE-1999-1552 entry concerns dpsexec (DPS Server) running under XDM on IBM AIX 3.2.5 and earlier. The root cause is an insufficient privilege check that allows local users to overwrite arbitrary files and gain privileges. The vulnerability is mapped with a NVD base score of 7.2 (HIGH) and LOC...

CVE-1999-1410

The CVE-1999-1410 issue affects IRIX versions 5.3 and 6.2 and is caused by addnetpr failing to securely handle a symlink to the printer’s temporary file. This local-access vulnerability lets a non-privileged user overwrite arbitrary files and potentially gain root privileges via a symlink attack ...