CVE-2012-3345

ioquake3 before r2253 is vulnerable to a local symlink attack on /tmp/ioq3.pid that allows a local user to overwrite arbitrary files. The root cause is a symlink/temporary file handling flaw that can be exploited by an unprivileged user with local access. Public advisories reference CVE-2012-3345...

CVE-2012-3345

ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file...

Design/Logic Flaw

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

CVE-2012-1818

The CVE-2012-1818 issue affects Emerson DeltaV and DeltaV Workstations (versions 9.3.1, 10.3.1, 11.3, 11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. An unspecified ActiveX control may allow remote attackers to overwrite arbitrary files via unknown vectors. Public sources describe this...

Ecava IntegraXor igcom.dll Traversal Arbitrary File Overwrite

Binary data scadaintegraxor3714200.nbin...

CVE-2012-1906

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages...

Puppet uses predictable filenames, allowing arbitrary file overwrite

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages...

AzDGDatingMedium 1.9.3 XSS / CSRF / SQL Injection / Directory Traversal

Exploit for php platform in category web applications ================================================= Vulnerable Software: AzDGDatingMedium Version 1.9.3 Official Site: http://www.azdg.com/ ================================================= ================================================= Teste...

CVE-2011-2722

The senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file...

Design/Logic Flaw

The senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file...

CVE-2011-2722

CVE-2011-2722 : In HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10, the send_data_to_stdout path in prnt/hpijs/hpcupsfax.cpp allows local users to overwrite arbitrary files via a symlink attack on /tmp/hpcupsfax.out. This yields a local, low–to–moderate impact with possible partial integ...

CVE-2012-2093

src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the gettmpfilename function...

CVE-2012-2093

src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the gettmpfilename function...

CVE-2012-2120

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2012-2093

src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the gettmpfilename function...

Low: iproute

Issue Overview: iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script. Affected Packages: iproute Issue Correction: Run yum update iproute or yum update --advisory ALAS-2012-64 to update...

Quest Toad for Oracle Explain Plan Display ActiveX Control - 'QExplain2.dll 6.6.1.1115' Remote File Creation / Overwrite

try obj.SaveToFile"c:\windows\win.ini"; catche try obj.SaveToFile"../../../../../../../../../../windows/win.ini"; catche...

Quest InTrust 10.4.x - ReportTree SimpleTree Classes

Quest InTrust 10.4.x - ReportTree SimpleTree Classes Quest InTrust 10.4.x ReportTree and SimpleTree Classes ArDoc.dll ActiveX Control Remote File Creation / Overwrite homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data from...

Quest InTrust 10.4.x ReportTree and SimpleTree Classes

Exploit for windows platform in category remote exploits Quest InTrust 10.4.x ReportTree and SimpleTree Classes ArDoc.dll ActiveX Control Remote File Creation / Overwrite homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data...

2X ApplicationServer TuxSystem ActiveX ExportSettings() Method Arbitrary File Overwrite

The install of the 2X ApplicationServer TuxSystem ActiveX control on the remote host reportedly could be abused to create or overwrite arbitrary files on the affected host using its 'ExportSettings' method. By tricking a user into opening a specially crafted web page, a remote, unauthenticated...