129 matches found
security flaw
Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server jbossas 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager...
Pages Pro filenote Parameter Traversal Arbitrary File Modification
A security vulnerability in the 'Pages Pro' allows anybody to read or modify files that would otherwise be inaccessible using a directory traversal attack. An attacker may use this to read or write sensitive files or even make a phone call. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
OpenVms 5.36.27.x - UCX POP Server Arbitrary File Modification
OpenVms 5.36.27.x - UCX POP Server Arbitrary File Modification source: https://www.securityfocus.com/bid/5790/info An issue with the UCX POP Post Office Protocol server used by OpenVMS has been reported. It is possible for a malicous local user to overwrite arbitrary files on the filesystem by...
QNX RTOS 4.25 - monitor Arbitrary File Modification
source: https://www.securityfocus.com/bid/4902/info The QNX RTOS monitor utility is prone to an issue which may allow local attackers to modify arbitrary system files such as /etc/passwd. monitor is installed setuid root by default. The monitor -f command line option may be used by a local attack...
CVE-2000-0551
The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
CVE-1999-0308
Technical details (affected product, version, vulnerability scope, and remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources for confirmation and guidance.