SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

CVE-2007-6050

Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "insecure directory."...

Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke3...

iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Directory Creation Vulnerability

IBM DB2 Universal Database Directory Creation Vulnerability iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. For...

fbi image viewer symbolic links problem

Symbolic links problem on directory creation...

CVE-2006-1166

Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary...

Ubuntu 4.10 : tetex-bin vulnerability (USN-51-1)

Javier Fernandez-Sanguino Pena noticed that 'xdvizilla', an auxiliary script to integrate DVI file viewing in Mozilla-based browsers, created temporary files and directories in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges o...

[SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 795-2 [email protected] http://www.debian.org/security/ Michael Stone September 2, 2005 http://www.debian.org/security/faq -...

CVE-2004-2458

Open WebMail 2.30 and earlier is affected. When use_syshomedir is disabled or create_syshomedir is enabled, the application creates new directories before authentication, enabling a remote attacker to create arbitrary directories. This is a client/server vulnerability in Open WebMail’s directory ...

YaPiG 0.9x - upload.php Directory Traversal

YaPiG 0.9x - upload.php Directory Traversal source: https://www.securityfocus.com/bid/13877/info YaPiG is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An authorized user can add and delete arbitrary...

CVE-2005-0134

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets...

Information leak in the Linux kernel ext2 implementation

Description: Information leak in the Linux kernel ext2 implementation References: CAN-2005-0400 Authors: Mathieu Lafon [email protected] Romain Francoise [email protected] Arkoon Security Team Advisory - March 25, 2005 http://arkoon.net/advisories/ext2-make-empty-leak.txt Revision: 1.0 1...

Linux ext2 filesystem information leak

During directory creating random data from kernel memory are written to disk...

CVE-2004-2369

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...

Multiple vulnerabilities in Icewarp Web Mail 5.2.7

ShineShadow Security Report 10092004-01 TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.2.7 BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secure and 100 vir...

DEBIAN-CVE-2004-0231

Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...

Windows XP/2003 server service memory leak

Memory leak on directory cration/deletion...

MS Windows XP/2003 Samba Share Resource Exhaustion Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows XP/2003 Samba Share Resource Exhaustion Exploit ========================================================== !/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve...

Microsoft Windows XP/2003 - Samba Share Resource Exhaustion (Denial of Service)

!/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the client creates and deletes a lot of files on the server, the server suddenly...

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files

include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n"; printf"\t-------------------------------------------------------------...