CVE-2009-1431: Undefined Security Weakness

XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 AMS2, as used in Symantec System Center SSS; Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus SAV Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10....

CVE-2009-1435

CVE-2009-1435 describes a local denial-of-service vulnerability in Trend Micro OfficeScan Client. The issue affects the NTRtScan.exe component on OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1, where an attacker with local access can cause an application crash by crafting directories with long pat...

Path traversal

Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbitrary directories and read arbitrary files via a full pathname in the file parameter...

PPLive Multiple Argument Injection Vulnerabilities

This host has PPLive installed and is prone to multiple argument injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodpplivecodeexevuln.nasl 5122 2017-01-27 12:16:00Z teissa $ PPLive Multiple Argument Injection Vulnerabilities Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

PPLive Multiple Argument Injection Vulnerabilities

PPLive is prone to multiple argument injection vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0843

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists...

CVE-2009-0842

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink...

Design/Logic Flaw

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists...

CVE-2009-0842: Exposure of Sensitive Information to an Unauthorized Actor

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink...

CVE-2009-1087

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the 1 synacast, 2 Play, 3 pplsv, or 4 ppvod URI handler. NOTE: some of these details are obtained from thi...

CVE-2009-1087: Improper Input Validation

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the 1 synacast, 2 Play, 3 pplsv, or 4 ppvod URI handler. NOTE: some of these details are obtained from thi...

Symantec pcAnywhere CHF File Pathname Format String Denial of Service

The version of Symantec pcAnywhere installed on the remote Windows host does not properly handle format strings within remote control file names '.CHF' or their associated file paths. Using a specially crafted file or path name, a local user may be able to exploit this issue to read or write...

linux/x86 file reader 65 bytes + pathname

No description provided by source. / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xor %ecx, %ecx xor %edx, %edx jmp two one: pop %ebx movb $5, %al xor %ecx, %ecx int $0x80 mov %eax, %esi jmp read exit: movb $1, %al xor %ebx, %eb...

linux/x86 file reader 65 bytes + pathname

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 file reader 65 bytes + pathname ========================================= / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xo...

Microsoft Word 2007 Sensitive Information Disclosure Vulnerability

Microsoft Word is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the...

CVE-2008-6063: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name...

Path traversal

Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform OCP 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter...

CVE-2009-0241

Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...

CVE-2009-0241

Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...