CVE-2007-4559

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

rPSA-2007-0172-1 tar

rPath Security Advisory: 2007-0172-1 Published: 2007-08-25 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Indirect User Deterministic Vulnerability Updated Versions: tar=/conary.rpath.com@rpl:devel//1/1.15.1-7.2-1 References: https://vulners.com/cve/CVE-2001-1267...

CVE-2007-4131

Directory traversal vulnerability in the containsdotdot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

PT-2007-1155

Name of the Vulnerable Software and Affected Versions: Python tarfile module versions affected versions not specified Description: A directory traversal vulnerability in the extract and extractall functions of the tarfile module in Python allows user-assisted remote attackers to overwrite arbitra...

Unreal Commander 0.92 - ZIP RAR Archive Handling Traversal Arbitrary File Overwrite

Unreal Commander 0.92 - ZIP RAR Archive Handling Traversal Arbitrary File Overwrite source: https://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal...

DEBIAN-CVE-2007-4462

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file...

ArgoSoft Mail Server MLSRVX.DLL任意文件覆盖漏洞

ArgoSoft Mail Server是一款多功能的邮件服务程序。 ArgoSoft Mail Server存在任意文件覆盖问题，远程攻击者可以利用漏洞进行拒绝服务攻击。 问题存在于MLSRVX.DLL中。使用恶意的ActiveX控件，调用不安全的方法，诱使用户访问可覆盖目标用户系统上的文件，造成拒绝服务攻击，或可能以登录用户进程权限执行任意指令。 ArGo Software Design ArGoSoft Mail Server 1.8.9.1 目前没有解决方案提供： http://www.argosoft.com/rootpages/MailServerNet/Default.as...

CVE-2007-3531: Undefined Security Weakness

The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file...

[Eleytt] 7LIPIEC2007

Eleytt Research www.eleytt.com Overview/Credit: ==================== Michal Bucko www.eleytt.com/michal.bucko sapheal.hack.pl Vulnerability Table =================== 1. Firefox 2.0.0.4 Remote Denial of Service Vulnerability 2. Microsoft Register Server Remote Denial of Service Issue 3. FreeWRL...

CVE-2007-3633: Undefined Security Weakness

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

CVE-2007-3660: Undefined Security Weakness

The Nonnoi ASP/Barcode ActiveX control nonnoiASPBarcode.dll allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function...

HP Photo Digital Imaging HPQXML.DLL任意文件覆盖漏洞

HP Photo Digital Imaging是一款图象处理软件。 HP Photo Digital Imaging HPQXML.DLL ActiveX控件不正确调用方法，远程攻击者可以利用漏洞覆盖系统任意文件，造成拒绝服务或任意代码执行。 问题存在于HPQXML.DLL中的ActiveX控件，由于不安全调用"saveXMLAsFile"方法，构建恶意的WEB页，诱使用户访问可导致覆盖系统任意文件，造成拒绝服务或任意代码执行。 HP HP Photo Digital Imaging hpqxml.dll 2.0.0.133 目前没有解决方案提供：...

CVE-2007-3400: Improper Input Validation

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method...

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues, multiple pointer-overwrite issues, and an arbitrary-file-overwrit...

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities

Ingress Database Server 2.6 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues,...

TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =================================================================== TEC-IT TBarCode OCX ActiveX Remote Arbitrary File Overwrite Exploit ===================================================================...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url: http://www.tec-it.com/asp/main/startfr.asp?LN=1 author: shinnai mail:...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite ----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url:...

zenturi-overwrite.txt

pre 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-2851: Undefined Security Weakness

A certain ActiveX control in LeadTools Raster Variant Object Library LTRVR14e.dll 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method...