PT-2013-5119

Name of the Vulnerable Software and Affected Versions File Roller versions 3.6.x through 3.6.3 File Roller versions 3.8.x through 3.8.2 File Roller versions 3.9.x through 3.9.2 Description The issue allows remote attackers to create arbitrary files via a crafted archive that is not properly handl...

CVE-2013-4668: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...

Jinc, ALL,

Jinc ALL - Exploit Type Arbitrary File Creation Vulnerability JINC until version 1.0.1 is affected by a vulnerability providing attackers the ability to update arbitrary files in Joomla! installation. This problem is solved in JINC 1.0.2...

CVE-2013-3080: Undefined Security Weakness

VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...

PT-2013-4136

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.1 before Update 1 Description The issue allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service. This is...

HP Intelligent Management Center mibFileUpload Servlet Unrestricted File Creation

Added: 04/05/2013 CVE: CVE-2012-5201 BID: 58385 OSVDB: 91026 Background HP Intelligent Management Center IMC, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. Problem HP IMC 5.1 E0202 and earlier i...

PT-2013-1848

Name of the Vulnerable Software and Affected Versions McAfee Virtual Technician versions 6.5.0.2101 and earlier ePO-MVT versions 6.5.0.2101 and earlier Description The issue allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method in an ActiveX...

CVE-2012-5879: Undefined Security Weakness

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

SCADA 3S CoDeSys Gateway Server Directory Traversal Vulnerability

This Metasploit module exploits a directory traversal vulnerability that allows arbitrary file creation, which can be used to execute a mof file in order to gain remote execution within the SCADA system. This file is part of the Metasploit Framework and may be subject to redistribution and...

CVE-2012-6274: Improper Authentication

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...

PT-2013-1919

Name of the Vulnerable Software and Affected Versions BigAntSoft BigAnt IM Message Server affected versions not specified Description The issue concerns a lack of authentication for file uploading, allowing remote attackers to create arbitrary files in a specific directory, namely...

NConf 1.3 - Arbitrary File Creation

NConf 1.3 - Arbitrary File Creation Exploit Title: nconf file read and wrtite exploit Date: 2013/1/20 Exploit Author: haidao，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Version: nconf 1.3 Tested on: Server: Apache/2.2.15 Centos PHP/5.3.3 nconf can modify t...

NConf 1.3 - Arbitrary File Creation

Exploit Title: nconf file read and wrtite exploit Date: 2013/1/20 Exploit Author: haidao，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Version: nconf 1.3 Tested on: Server: Apache/2.2.15 Centos PHP/5.3.3 nconf can modify the config file of nagios and save it...

Request Tracker 3.x < 3.8.15 / 4.x < 4.0.8 Multiple Vulnerabilities

According to its self-reported version number, the Best Practical Solutions Request Tracker RT running on the remote web server is version 3.x prior to 3.8.15 or version 4.x prior to 4.0.8. It is, therefore, potentially affected by the following vulnerabilities : - Users can inject arbitrary...

CVE-2012-4522: Undefined Security Weakness

The rbgetpathcheck function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path...

PT-2012-4777

Name of the Vulnerable Software and Affected Versions Munin versions prior to 2.0.6 Description The issue allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command when munin-cgi-graph is running as a CGI module under Apache. Recommendatio...

CVE-2012-3513: Undefined Security Weakness

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command...

PT-2012-5636

Name of the Vulnerable Software and Affected Versions Request Tracker RT versions 3.8.x through 3.8.14 Request Tracker RT versions 4.0.x through 4.0.7 Description The issue allows remote attackers to create arbitrary files via unspecified vectors related to the GnuPG client. Recommendations For...

CVE-2012-5171: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file...

BeZIP vulnerable to directory traversal

Overview BeZIP contains a directory traversal vulnerability. BeZIP provided by Be Graph Co.,Ltd. is a file compression/extraction software supporting ZIP and LZH formats. BeZIP contains a directory traversal vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this...