CVE-2005-4449: Undefined Security Weakness

verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, th...

CVE-2005-3349: Improper Link Resolution Before File Access

GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file...

CVE-2005-3098: Undefined Security Weakness

poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t trace file command line argument...

CVE-2005-1842: Undefined Security Weakness

VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack...

CVE-2005-0391: Undefined Security Weakness

geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...

CVE-2005-0576: Undefined Security Weakness

Unknown vulnerability in Standard Type Services Framework STSF Font Server Daemon stfontserverd in Solaris 9 allows local users to modify or delete arbitrary files...

CVE-2004-0828: Undefined Security Weakness

The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files...

CVE-2004-0698: Undefined Security Weakness

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack...

Pages Pro filenote Parameter Traversal Arbitrary File Modification

A security vulnerability in the 'Pages Pro' allows anybody to read or modify files that would otherwise be inaccessible using a directory traversal attack. An attacker may use this to read or write sensitive files or even make a phone call. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

OpenVms 5.36.27.x - UCX POP Server Arbitrary File Modification

OpenVms 5.36.27.x - UCX POP Server Arbitrary File Modification source: https://www.securityfocus.com/bid/5790/info An issue with the UCX POP Post Office Protocol server used by OpenVMS has been reported. It is possible for a malicous local user to overwrite arbitrary files on the filesystem by...

CVE-2002-0934: Undefined Security Weakness

Directory traversal vulnerability in Jon Hedley AlienForm2 typically installed as af.cgi or alienform.cgi allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. dot dot sequence in the parameters 1 browserout or 2 outfile...

QNX RTOS 4.25 - monitor Arbitrary File Modification

source: https://www.securityfocus.com/bid/4902/info The QNX RTOS monitor utility is prone to an issue which may allow local attackers to modify arbitrary system files such as /etc/passwd. monitor is installed setuid root by default. The monitor -f command line option may be used by a local attack...

CVE-2002-0278: Undefined Security Weakness

Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. dot dot in the list parameter...

CVE-2002-0248: Undefined Security Weakness

wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file...

CVE-2000-0551

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...

CVE-2000-1190: Undefined Security Weakness

imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file...

CVE-2000-0551: Undefined Security Weakness

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...

CVE-1999-1090: Undefined Security Weakness

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files...

CVE-2001-0817: Undefined Security Weakness

Vulnerability in HP-UX line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request...

CVE-2001-0434: Undefined Security Weakness

The LogDataListToFile ActiveX function used in 1 Knowledge Center and 2 Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service...