CVE-2006-5215: Undefined Security Weakness

The Xsession script, as used by X Display Manager xdm in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file...

IBM AIX utilities multiple security vulnerabilities

Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...

CVE-2006-5004: Undefined Security Weakness

Unspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to overwrite arbitrary files via unspecified vectors...

[SA22062] IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability

TITLE: IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability SECUNIA ADVISORY ID: SA22062 VERIFY ADVISORY: http://secunia.com/advisories/22062/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: ...

CVE-2006-4233: Undefined Security Weakness

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information proxy certificates and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by 1 myproxy-admin-adduser, 2 grid-ca-sign, and...

CVE-2006-3619: Undefined Security Weakness

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences...

RadScripts - 'a_editpage.php?Filename' Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/19128/info Multiple Rad Scripts products are prone to an authentication-bypass vulnerability. These issues occur because the applications fail to prevent an attacker from accessing admin scripts directly without requiring authentication. A remote attacker...

RadScripts - a_editpage.php?Filename Arbitrary File Overwrite

RadScripts - aeditpage.php?Filename Arbitrary File Overwrite source: https://www.securityfocus.com/bid/19128/info Multiple Rad Scripts products are prone to an authentication-bypass vulnerability. These issues occur because the applications fail to prevent an attacker from accessing admin scripts...

CVE-2006-3593

The command line interface CLI in Cisco Unified CallManager CUCM 5.01 through 5.03a allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704...

CVE-2006-3426: Undefined Security Weakness

Directory traversal vulnerability in a PatchLink Update Server PLUS before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and b Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. dot dot sequence in the 1 action, 2 agentid, or 3 index parameters ...

CVE-2006-3288: Undefined Security Weakness

Unspecified vulnerability in the TFTP server in Cisco Wireless Control System WCS for Linux and Windows before 3.251, when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors...

CVE-2006-2717: Undefined Security Weakness

Unspecified vulnerability in Secure Elements Class 5 AVR client and server aka C5 EVM before 2.8.1 allows authenticated attackers to overwrite arbitrary files 1 on a server during an update or 2 on a client via modified pathnames, possibly due to a directory traversal issue...

Secure Elements Class 5 AVR server fails to properly validate pathnames when downloading updates

Overview The Secure Elements Class 5 AVR server fails to properly validate pathnames when downloading updates. This may allow an attacker to overwrite arbitrary files on the server system. Description Class 5 AVR Secure Elements Class 5 AVR Automated Vulnerability Remediation is a security produc...

CVE-2005-4803: Undefined Security Weakness

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...

CVE-2006-1440

BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links...

CVE-2006-1440

The CVE-2006-1440 entry affects Apple Mac OS X, specifically versions 10.3.9 and 10.4.6. The vulnerability arises from a BOM-related issue where an archive containing symbolic links can lead attackers to overwrite arbitrary files. The connected documents corroborate the same description, reinforc...

CVE-2006-1440: Undefined Security Weakness

BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links...

CVE-2006-1247: Improper Link Resolution Before File Access

rmmlcachefile in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2006-1753

A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

[SA19656] IBM AIX rm_mlcache_file Arbitrary File Overwrite

TITLE: IBM AIX rmmlcachefile Arbitrary File Overwrite SECUNIA ADVISORY ID: SA19656 VERIFY ADVISORY: http://secunia.com/advisories/19656/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerability...