CVE-2004-2369

Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. dot dot in the directory creation command...

Multiple vulnerabilities in Icewarp Web Mail 5.2.7

ShineShadow Security Report 10092004-01 TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.2.7 BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secure and 100 vir...

DEBIAN-CVE-2004-0231

Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...

Windows XP/2003 server service memory leak

Memory leak on directory cration/deletion...

MS Windows XP/2003 Samba Share Resource Exhaustion Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows XP/2003 Samba Share Resource Exhaustion Exploit ========================================================== !/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve...

Microsoft Windows XP/2003 - Samba Share Resource Exhaustion (Denial of Service)

!/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the client creates and deletes a lot of files on the server, the server suddenly...

SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files

include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n"; printf"\t-------------------------------------------------------------...

[slackware-security] cvs security update

CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory deals with the use of CVS as a server. A security problem which could allow an attacker to create directories and possibly...

CVE-2003-0977

CVE-2003-0977 affects the CVS server prior to 1.11.10, where malformed module requests could cause the server to create directories and files in the filesystem root. The issue is documented across multiple advisories (e.g., RHSA-2004:004, MDKSA-2003:112-1, DSA 422-1) with a common remediation: up...

DEBIAN-CVE-2003-0833

Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname...

WebFS 1.x - Pathname Buffer Overrun

WebFS 1.x - Pathname Buffer Overrun // source: https://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...

WebFS 1.x - 'Pathname' Buffer Overrun

// source: https://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting sensitive memory with malicious dat...

BRS Webweaver 1.0 1 - MKDir Directory Traversal

BRS Webweaver 1.0 1 - MKDir Directory Traversal source: https://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory...

ezContents multiple vulnerabilities

ezContents multiple vulnerabilities PROGRAM: ezContents VENDOR: Marek Lyczba et al. [email protected] HOMEPAGE: http://www.visualshapers.com/ VULNERABLE VERSIONS: 1.40, 1.41, possibly others as well NOT VULNERABLE VERSIONS: none one hole fixed in 1.41 LOGIN REQUIRED: yes some issues, no some...

LogWatch 2.1.1/2.5 - Insecure Temporary Directory Creation

source: https://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp. This directory uses the name logwatch.$pid, where $pid i...

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack b...

Rumpus FTP Server 1.3.x/2.0.3 - Stack Overflow Denial of Service

source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack by making a directory with an unusual number of sub-folders. This...

SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition (2)

SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition 2 source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE...

RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service

source: https://www.securityfocus.com/bid/1664/info Any user with write access to /tmp or /var/tmp, can induce tmpwatch to cause Red Hat and others runnng tmpwatch from cron to stop responding, and possibly require a hard reboot. This is accomplished by creating a directory tree many ie. 6000 nod...

RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service

RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service source: https://www.securityfocus.com/bid/1664/info Any user with write access to /tmp or /var/tmp, can induce tmpwatch to cause Red Hat and others runnng tmpwatch from cron to stop responding, and possibly require a hard reboot...