3040 matches found
[SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal
-------------------------------------------------------------------------- Debian Security Advisory DSA 1080-1 [email protected] http://www.debian.org/security/ Steve Kemp May 29th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1071-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability
====================================================================== Secunia Research 17/05/2006 - Eazel unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2006-1457
Safari on Apple Mac OS X 10.4.6, when "Open safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink...
Sophos Anti-Virus memory corruption
Heap memory corruption on CAB archives parsing...
neo-Advisory-20.txt
/ --------------------------------------------------------------- Neo Security Team NST® Advisory 20 --------------------------------------------------------------- Program : CuteNews 1.4.1 Homepage: http://www.cutephp.com Vulnerable Versions: CuteNews 1.4.1 & lower ones Risk: Medium! Impact: Cro...
poweriso 2.9 - Directory Traversal
poweriso 2.9 - Directory Traversal source: https://www.securityfocus.com/bid/17726/info Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. A successful attack can allow the attacker to place...
winiso 5.3 - Directory Traversal
winiso 5.3 - Directory Traversal source: https://www.securityfocus.com/bid/17721/info Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. A successful attack can allow the attacker to place...
winiso 5.3 - Directory Traversal
source: https://www.securityfocus.com/bid/17721/info Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. A successful attack can allow the attacker to place potentially malicious files and to...
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...
Directory traversal
Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a 1 RAR, 2 TAR, 3 ZIP, or 4 TAR.GZ archive with a file whose file name contains ".." sequences...
Design/Logic Flaw
CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives."...
CVE-2006-0400
CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives."...
CVE-2006-0400
CVE-2006-0400 affects Apple Mac OS X 10.4 up to 10.4.5 (CoreTypes). Affected component: CoreTypes, with a flaw that allows remote attackers to bypass the same-origin policy and execute JavaScript in other domains via crafted archives. Root cause details are not explicitly provided in the document...
CVE-2006-0400
CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives."...
DEBIAN-CVE-2006-0950
unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...
GLSA-200603-05 : zoo: Stack-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-200603-05 zoo: Stack-based buffer overflow Jean-Sebastien Guay-Leroux discovered a boundary error in the fullpath function in misc.c when processing overly long file and directory names in ZOO archives. Impact : An attacker could...
DSA-987-1 tar - buffer overflow
Bulletin has no description...
KLA10339 WLF vulnerability in SpeedProject
A directory traversal vulnerability was found in SpeedProject products. By exploiting this vulnerability malicious users can overwrite local files. This vulnerability can be exploited remotely at a point related to the JAR and ZIP archives. Original advisories - Related products...