CVE-2006-2958

FilZip 3.05 is affected by a directory traversal vulnerability that lets remote attackers write arbitrary files by exploiting a .. sequence in archive members with extensions .rar, .tar, .jar, or .gz. The impact is described as potential partial integrity impact and no confidentiality or availabi...

CVE-2006-2958: Undefined Security Weakness

Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. dot dot in a 1 .rar, 2 .tar, 3 .jar, or 4 .gz file. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1175: Undefined Security Weakness

The WeOnlyDo! SFTP wodSFTP ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page...

CVE-2006-2102: Undefined Security Weakness

Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2006-2099: Undefined Security Weakness

Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2006-2101: Undefined Security Weakness

Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2006-2006: Undefined Security Weakness

Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\ dot dot backslash in a 1 .rar, 2 .tar, 3 .zip, 4 .jar, or 5 .gz archive. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2005-3124: Undefined Security Weakness

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3030: Undefined Security Weakness

Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. dot dot in the filename in a compressed archi...

CVE-2005-2891: Undefined Security Weakness

WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the 1 MakeArchive or 2 MakeArchiveStr methods...

CVE-2004-2380: Undefined Security Weakness

Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. dot dot in the attfile parameter...

MDaemon Content Filter Traversal Arbitrary File Write

According to its banner, the version of MDaemon on the remote host is prone to a directory traversal flaw that can be exploited to overwrite files outside the application's quarantine directory provided MDaemon's attachment quarantine feature is enabled. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2005-2095: Undefined Security Weakness

optionsidentities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS attacks, and write arbitrary files...

CVE-2002-1838: Undefined Security Weakness

Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files...

CVE-2002-1956: Undefined Security Weakness

ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files...

CVE-2005-2007: Undefined Security Weakness

Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the id parameter to the 1 upload or 2 attachment scripts...

CVE-2005-1396: Undefined Security Weakness

Race condition in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ceeditlog temporary file...

CVE-2005-1301: Undefined Security Weakness

nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files...

CVE-2005-1238: Undefined Security Weakness

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request...

CVE-2005-1228: Undefined Security Weakness

Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. dot dot in the original filename within a compressed file...