CVE-2008-1998: Undefined Security Weakness

The NNSTAT aka SYSPROC.NNSTAT procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter...

WatchFire Appscan 7.0 ActiveX Multiple Insecure Methods Exploit

Exploit for unknown platform in category remote exploits =============================================================== WatchFire Appscan 7.0 ActiveX Multiple Insecure Methods Exploit =============================================================== Multiple Insecure Methods in AppScan Watchfire W...

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods

Watchfire Appscan 7.0 - ActiveX Multiple Insecure Methods Multiple Insecure Methods in AppScan Watchfire Web Application Security v 7.0 Remote: Yes An arbitrary file overwrite has been discovered in an ActiveX control installed with the WatchFire Appscan v 7.0. by callAX - Fr33d0m & Kn0wl3dg3 1s...

Zune software - arbitrary file overwrite

Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in an ActiveX control installed with the Zune softwar...

CVE-2008-1933: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...

Zune Software ActiveX Arbitrary File Overwrite Exploit

No description provided by source. Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in an ActiveX...

Zune Software ActiveX Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits ====================================================== Zune Software ActiveX Arbitrary File Overwrite Exploit ====================================================== Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 20...

Zune Software - ActiveX Arbitrary File Overwrite

Zune Software - ActiveX Arbitrary File Overwrite Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in a...

Zune Software - ActiveX Arbitrary File Overwrite

Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in an ActiveX control installed with the Zune softwar...

zune-overwrite.txt

Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in an ActiveX control installed with the Zune softwar...

Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server. Remotely exploitable: Yes Authentication to Database Server is...

CVE-2008-1832

CVE-2008-1832 affects Cecilia 2.0.5: lib/prefs.tcl allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file. Connected advisories document remediation in Cecilia 2.0.5-282.2 for openSUSE GA media, and related vendor entries reference the same issue. The im...

CVE-2007-5664: Improper Link Resolution Before File Access

db2dasrrm in the DB2 Administration Server DAS in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization...

CVE-2008-1832: Improper Link Resolution Before File Access

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file...

CVE-2008-1725: Undefined Security Weakness

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

CVE-2008-1647: Improper Input Validation

The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained...

CVE-2008-1605

The 1 ltmmCaptureCtrl Class, 2 ltmmConvertCtrl Class, and 3 ltmmPlayCtrl Class ActiveX controls ltmm15.dll 15.1.0.17 and earlier in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method...

CVE-2008-1605: Improper Input Validation

The 1 ltmmCaptureCtrl Class, 2 ltmmConvertCtrl Class, and 3 ltmmPlayCtrl Class ActiveX controls ltmm15.dll 15.1.0.17 and earlier in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method...

CVE-2008-1417: Improper Link Resolution Before File Access

The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file...

CVE-2008-1322

The CVE-2008-1322 issue affects ASG-Sentry Network Manager, specifically the File Check Utility (fcheck.exe) bundled with versions up to 7.0.0. The connected Nessus entry documents that fcheck.exe fails to sanitize input when creating index files, allowing an unauthenticated remote attacker to ov...