10291 matches found
CVE-2015-2962: Improper Input Validation
CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors...
PT-2015-6010
Name of the Vulnerable Software and Affected Versions CGI RESCUE BloBee versions 1.20 and earlier Description The issue allows remote attackers to write to arbitrary files and consequently execute arbitrary code via unspecified vectors. Recommendations For versions 1.20 and earlier, at the moment...
Zarafa Collaboration Platform Local Arbitrary File Write Vulnerability
Zarafa Collaboration Platform is a suite of open source email and calendaring software. A security vulnerability in the provider/server/ECServer.cpp file of Zarafa Collaboration Platform allows a local attacker to write arbitrary files by performing a symbolic link attack on the...
CVE-2015-3436: Improper Link Resolution Before File Access
provider/server/ECServer.cpp in Zarafa Collaboration Platform ZCP before 7.1.13 and 7.2.x before 7.2.1 allows local users to write to arbitrary files via a symlink attack on /tmp/zarafa-upgrade-lock...
PT-2015-3191
Name of the Vulnerable Software and Affected Versions Zarafa Collaboration Platform versions prior to 7.1.13 Zarafa Collaboration Platform versions 7.2.x prior to 7.2.1 Description The issue is related to a file access control flaw in the provider/server/ECServer.cpp component. It allows local...
PT-2020-7830 · Abrt +2 · Abrt +2
Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue allows local users to potentially write to arbitrary files or have other unspecified impact via a symlink attack on certain directories. Recommendations: At the moment, there is no...
CVE-2015-2993: Undefined Security Weakness
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to 1 create administrator accounts via a crafted request to /createnewaccount or 2 write to arbitrary files via the fileName parameter to /userentry...
Visual Mining NetChart Directory Traversal Vulnerability
Visual Mining NetChart is a suite of data visualization tools from Visual Mining USA. The tool supports the generation of data in the form of charts, graphs, and reports. A directory traversal vulnerability exists in the saveFile.jsp file in the development installer of Visual Mining NetChart. A...
CVE-2015-2950: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Brandon Bowles Open Explorer application before 0.254 Beta for Android allows remote attackers to write to arbitrary files via a crafted filename...
GNU Parallel Arbitrary File Write Vulnerability
GNU Parallel is a set of shell tools developed by the GNU Project that can be used to parallelize the execution of jobs on a single or multiple machines. A security vulnerability exists in versions prior to GNU Parallel 20150522. When a program uses the --cat and --sshlogin commands or the --fifo...
CVE-2015-4156
GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...
CVE-2015-4155: Improper Link Resolution Before File Access
GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...
CVE-2015-4156: Improper Link Resolution Before File Access
GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...
CVE-2015-4031: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in saveFile.jsp in the development installation in Visual Mining NetChart allows remote attackers to write to arbitrary files via unspecified vectors...
CVE-2015-0171: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors...
UBUNTU-CVE-2015-1324
Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root...
PT-2015-5212
Name of the Vulnerable Software and Affected Versions Apport versions prior to 2.17.2-0ubuntu1.1 Apport versions prior to 2.14.70ubuntu8.5 Apport versions prior to 2.14.1-0ubuntu3.11 Apport versions prior to 2.0.1-0ubuntu17.9 Description A race condition issue allows local users to write to...
PT-2015-6093
Name of the Vulnerable Software and Affected Versions FUSE versions prior to 2.9.3-15 Description The issue arises from fusermount in FUSE not properly clearing the environment before invoking mount or umount as root. This allows local users to write to arbitrary files via a crafted LIBMOUNT MTAB...
CVE-2015-0267
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...