CVE-2007-4061: Undefined Security Weakness

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related...

CVE-2007-3649: Undefined Security Weakness

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-1904: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

DEBIAN-CVE-2007-1329

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...

CVE-2006-5487: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive...

CVE-2006-5569: Undefined Security Weakness

FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Solaris libnspr NSPR_LOG_FILE Privilege Escalation

This module exploits an arbitrary file write vulnerability in the Netscape Portable Runtime library libnspr on unpatched Solaris systems prior to Solaris 10u3 which allows users to gain root privileges. libnspr versions prior to 4.6.3 allow users to specify a log file with the NSPRLOGFILE...

CVE-2006-4942: Undefined Security Weakness

Moodle before 1.6.2, when the configuration lacks 1 algebra or 2 tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top level of the dataroot directory via a filter/algebra/pix.php or b filter/tex/pix.php...

CVE-2006-4767: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript aka WM-News 0.5beta allow remote attackers to 1 read arbitrary local files via a .. dot dot sequence in the ide parameter in modify.php and 2 write to arbitrary local files via a .. sequence in the var parameter in addgo.php...

CVE-2006-2958

FilZip 3.05 is affected by a directory traversal vulnerability that lets remote attackers write arbitrary files by exploiting a .. sequence in archive members with extensions .rar, .tar, .jar, or .gz. The impact is described as potential partial integrity impact and no confidentiality or availabi...

CVE-2006-2958: Undefined Security Weakness

Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. dot dot in a 1 .rar, 2 .tar, 3 .jar, or 4 .gz file. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1175: Undefined Security Weakness

The WeOnlyDo! SFTP wodSFTP ActiveX control is marked as safe for scripting, which allows remote attackers to read and write files in arbitrary locations by accessing the control from a web page...

CVE-2006-2102: Undefined Security Weakness

Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2006-2099: Undefined Security Weakness

Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2006-2101: Undefined Security Weakness

Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2006-2006: Undefined Security Weakness

Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\ dot dot backslash in a 1 .rar, 2 .tar, 3 .zip, 4 .jar, or 5 .gz archive. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2005-3124: Undefined Security Weakness

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3030: Undefined Security Weakness

Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. dot dot in the filename in a compressed archi...

CVE-2005-2891: Undefined Security Weakness

WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the 1 MakeArchive or 2 MakeArchiveStr methods...

CVE-2004-2380: Undefined Security Weakness

Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. dot dot in the attfile parameter...