[SECURITY] [DSA-366-1] New eroaster packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 366-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0524

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

CVE-2003-0524: Undefined Security Weakness

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

CVE-2003-0392

The CVE-2003-0392 entry concerns ST FTP Service 3.0, where a vulnerability in the CD command handling enables directory traversal. An attacker can cause the server to list arbitrary directories by supplying a drive-letter argument (for example, CD E:), potentially exposing files outside the FTP j...

CVE-2003-0392: Undefined Security Weakness

Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument e.g. E:...

ST FTP directory traversal

It's possible to perform cd to any disk...

CVE-2002-1268

Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."...

[LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware

LoWNOISE "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware by Efrain 'ET' Torres, Colombia 2002. [email protected] +Disclaimer: blah. +Product: -SunONE Starter Kit v2.0 Sun Microsystems CD-ROM Version -ASTAware SearchDisk 2002. ASTAWARE Technologies Inc. +Introduction You are one of...

Sun Sunsolve CD Pack sscd_suncourier.pl email Parameter Arbitrary Command Execution

The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: Nessus did not try to...

CVE-2001-1295: Undefined Security Weakness

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2002-0436

sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...

CVE-2002-0436

The CVE-2002-0436 entry maps to the SunSolve CD package: the CGI script sscd_suncourier.pl does not validate the email parameter, enabling remote command execution via shell metacharacters. Documented by NVD/Nessus/OpenVAS references, this is a clientless, remote issue affecting Sunsolve CD CGI i...

CVE-2002-0436: Undefined Security Weakness

sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...

CVE-2001-1300: Undefined Security Weakness

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2001-1131: Undefined Security Weakness

Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... modified dot dot in the CD command...

SunSolve CD cgi scripts...

Sun never responded to this mail so I guess they don't consider the bug too be serious ... could be worth mentioning though. ----- Forwarded message from Fyodor [email protected] ----- Date: Sat, 16 Jun 2001 23:24:45 +0700 From: Fyodor [email protected] To: [email protected] Subject:...

Solaris 7.0/8 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution

source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI script included with the CD does not adequately sanitize input. Due to a design failure...

Solaris 7.08 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution

Solaris 7.08 Sunsolve CD - SSCDSunCourier.pl CGI Script Arbitrary Command Execution source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI scri...

CVE-2001-0963

SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...

CVE-2001-0963: Undefined Security Weakness

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... modified dot dot in the CD CWD command...