PT-2010-5290

Name of the Vulnerable Software and Affected Versions Robo-FTP versions 3.7.3 through 3.7.4 Description A directory traversal issue exists in the FTP client, allowing remote FTP servers to write arbitrary files by including a .. dot dot in a filename within a server response. Recommendations For...

Mandriva Update for php-pear-Mail MDVSA-2010:025 (php-pear-Mail)

Check for the Version of php-pear-Mail OpenVAS Vulnerability Test Mandriva Update for php-pear-Mail MDVSA-2010:025 php-pear-Mail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2008-1000: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 aka Leopard allows remote authenticated users to write arbitrary files via ".." sequences in file attachments...

CVE-2006-2100: Undefined Security Weakness

Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2005-2384: Undefined Security Weakness

Directory traversal vulnerability in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with 1 .. or 2 absolute pathnames...

CVE-2005-1774: Undefined Security Weakness

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

CVE-2005-0845: Undefined Security Weakness

Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. dot dot in the attachid parameter...