PT-2015-4980

Name of the Vulnerable Software and Affected Versions ANTlabs InnGate firmware versions on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G Description The issue allows remote attackers to read or write to arbitrary files via TCP...

Cisco AnyConnect Secure Mobility Client Arbitrary File Write Vulnerability

The Cisco AnyConnect Secure Mobility Client is Cisco's next-generation VPN client. The Cisco AnyConnect Secure Mobility Client has a security vulnerability in inter-process communication IPC that allows a local attacker to write and overwrite arbitrary files with elevated privileges...

PT-2015-4790

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 4.0.00051 and earlier Description The issue is related to improper implementation of access control for IPC messages, allowing local users to write to arbitrary files via crafted messages...

CVE-2015-0665: Improper Limitation of a Pathname to a Restricted Directory

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173...

CVE-2015-0663: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392...

CVE-2015-2304: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

Cisco AnyConnect Secure Mobility Client Arbitrary File Write Vulnerability

A vulnerability in the inter-process communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to write arbitrary files with elevated privileges. The vulnerability is due to lack of authentication or authorization of certain IPC commands. An...

PT-2015-5703

Name of the Vulnerable Software and Affected Versions libarchive versions 3.1.2 and earlier Description The issue allows remote attackers to write to arbitrary files via a full pathname in an archive. This is due to an absolute path traversal vulnerability in bsdcpio. Recommendations For libarchi...

KENT-WEB Joyful Note Arbitrary Code Execution Vulnerability

KENT-WEB Joyful Note is a suite of message board applications from the Japanese company KENT-WEB. A security vulnerability exists in KENT-WEB Joyful Note versions prior to 5.3. A remote attacker can exploit the vulnerability to delete or write arbitrary files and execute arbitrary code...

CVE-2014-9282: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename...

PT-2015-4176

Name of the Vulnerable Software and Affected Versions Speed Root Explorer versions prior to 3.2 Speed Explorer versions prior to 2.2 Description The issue allows remote attackers to write to arbitrary files via a crafted filename, potentially leading to unauthorized data modification...

DEBIAN-CVE-2015-1589

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. dot dot in a CHM file...

CVE-2015-1589: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. dot dot in a CHM file...

Rsync Arbitrary File Write Vulnerability

rsync is a data mirroring backup application for Unix-like systems developed by Australian software developers Andrew Tridgell and Paul Mackerras that synchronizes file and directory updates between two computers and uses differential encoding to reduce data transfers. An arbitrary file write...

CVE-2015-0878: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

PT-2015-4007

Name of the Vulnerable Software and Affected Versions KIE Workbench versions 6.0.x Description The issue in KIE Workbench allows remote authenticated users to bypass intended access restrictions, read or write to arbitrary files, and possibly have other unspecified impact. Recommendations For KIE...

CVE-2014-1832: Undefined Security Weakness

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831...

PT-2015-7879

Name of the Vulnerable Software and Affected Versions GNU Cpio version 2.11 Description The issue allows a rogue archive to write files outside the current directory by bypassing the --no-absolute-filenames option using symlinks. While extracting an archive, GNU Cpio will extract symlinks and the...

CVE-2014-1831: Undefined Security Weakness

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file...

CVE-2015-1197: Undefined Security Weakness

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive...