1664 matches found
CVE-2005-0587
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...
CVE-2005-0161
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...
CVE-2005-0161
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...
SHOUTcast 1.9.4 File Request Format String Remote Exploit (win)
No description provided by source. / Object: PoC for Nullsoft SHOUTcast 1.9.4 File Request Format String Vulnerability From the securityfocus bid at http://www.securityfocus.com/bid/12096 : "This issue was reported to exist in version 1.9.4 on Linux. It is likely that versions for other platforms...
GLSA-200501-42 : VDR: Arbitrary file overwriting issue
The remote host is affected by the vulnerability described in GLSA-200501-42 VDR: Arbitrary file overwriting issue Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that VDR accesses user-controlled files insecurely. Impact : A local attacker could create malicious lin...
GLSA-200501-43 : f2c: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200501-43 f2c: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that f2c creates temporary files in world-writeable directories with predictable names. Impact : A local...
CVE-2005-0365
The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
Perl: Vulnerabilities in perl-suid wrapper
Background Perl is a stable, cross-platform programming language created by Larry Wall. The perl-suid wrapper allows the use of setuid perl scripts, i.e. user-callable Perl scripts which have elevated privileges. This function is enabled only if you have the perlsuid USE flag set. Description...
CVE-2005-0304
Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in a filename in a ZIP file for a skin...
CVE-2004-0976
Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files...
3CServer 1.1 FTP Server Remote Exploit
No description provided by source. / subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore,...
3CServer 1.1 FTP Server Remote Exploit
Exploit for unknown platform in category remote exploits ====================================== 3CServer 1.1 FTP Server Remote Exploit ====================================== / subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com,...
3CServer 1.1 (FTP Server) - Remote Overflow
/ subject: Proof of Concept exploit for 3CServer v1.1 FTP server vendor: 3Com, http://support.3com.com/software/utilitiesforwindows32bit.htm date: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore, mandragore@[email protected] / include...
CVE-2005-0213
The CVE-2005-0213 entry describes a directory traversal vulnerability in WinHKI 1.4d where an attacker can cause the application to overwrite arbitrary files by embedding a ".." in a ZIP file. The available sources (NVD/NVD-derived records) provide the affected software and the vulnerable behavio...
VDR: Arbitrary file overwriting issue
Background Video Disk Recorder VDR is a Linux-based digital video recorder. The VDR program handles the On Screen Menu system that offers complete control over channel settings, timers and recordings. Description Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that V...
vdr (DVB video disk recorders daemon) symbolic links problem
It's possible to overwrite arbitrary files...
[Full-Disclosure] Arbitrary files overwriting through skins in DivX Player 2.6
Luigi Auriemma Application: DivX Player http://www.divx.com/divx/player/ Versions: = 2.6 Platforms: Windows Bug: arbitrary files overwriting through skins Exploitation: local or remote through browser Date: 21 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web:...
CVE-2005-1846
Multiple directory traversal vulnerabilities in YaMT before 0.52 allow attackers to overwrite arbitrary files via the 1 rename or 2 sort options...
tnftp: Arbitrary file overwriting
Background tnftp is a NetBSD FTP client with several advanced features. Description The 'mget' function in cmds.c lacks validation of the filenames that are supplied by the server. Impact An attacker running an FTP server could supply clients with malicious filenames, potentially allowing the...
