Code injection

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

DEBIAN-CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

DEBIAN-CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-1569

CVE-2008-1569 affects policyd-weight (0.1.14 beta-16 and earlier). A local attacker can exploit insecure temporary file handling used when creating a socket, via a symlink attack on the /tmp/.policyd-weight/ directory, potentially deleting arbitrary files or changing ownership to the polw user. R...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1570

policyd-weight contains a local race condition in create_lockpath that lets unprivileged users modify or delete files by exploiting the LOCKPATH handling. The issue affects the insecure handling of the temporary directory, noted as a result of an incomplete fix for CVE-2008-1569, and is discussed...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

policyd-weight symbolic links vulnerabilities

Symbolic links vulnerability on temporary file creation...

[SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1531-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 27, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1531-2] New policyd-weight packages fix insecure temporary files

------------------------------------------------------------------------ Debian Security Advisory DSA-1531-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 29, 2008 http://www.debian.org/security/faq -...

Debian DSA-1531-2 : policyd-weight - insecure temporary files

Chris Howells discovered that policyd-weight, a policy daemon for the Postfix mail transport agent, created its socket in an insecure way, which may be exploited to overwrite or remove arbitrary files from the local system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

DSA-1531-2 policyd-weight - insecure temporary files

Bulletin has no description...

postfix-policyd-weight -- working directory symlink vulnerability

postfix-policyd-weight does not check for symlink for its working directory. If the working directory is not already setup by the super root, an unprivileged user can link it to another directories in the system. This results in ownership/permission changes on the target directory...

Light Weight Calendar 1.x - date Remote Code Execution

Light Weight Calendar 1.x - date Remote Code Execution !/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use...

Light Weight Calendar 1.x (date) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Light Weight Calendar 1.x date Remote Code Execution Vulnerability ==================================================================== !/usr/bin/perl Light Weight Calend...

Light Weight Calendar 1.x - 'date' Remote Code Execution

!/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use LWP::Simple; print...

EV0029.txt

New eVuln Advisory: Light Weight Calendar PHP Code Execution http://evuln.com/vulns/29/summary.html --------------------Summary---------------- Software: Light Weight Calendar Sowtware's Web Site: http://sourceforge.net/projects/lwcal/ Versions: 1.0 Critical Level: Dangerous Type: PHP Code...