7280 matches found
CVE-2009-5044
contrib/pdfmark/pdfroff.sh in GNU troff aka groff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf.tmp temporary file...
Kofax 2.5.0.933 File Overwrite
Vulnerability ID: HTB23016 Reference: http://www.htbridge.ch/advisory/kofaxetransactionssendersendboxactivexcontrolsavemessageinsecuremethod.html Product: Kofax e-Transactions Sender Sendbox Vendor: Kofax, Inc http://www.kofax.com/ Vulnerable Version: 2.5.0.933 and probably prior Tested on:...
StudioLine Photo Basic 3 ActiveX control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in StudioLine Photo Basic 3 ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in StudioLine Photo Basic 3 ActiveX control The vulnerability is caused due to the NMSDVDX.DVDEngineX.1...
File overwrite vulnerability in Multi-Domain Management / Provider-1 script (CVE-2011-2664)
...
Quest Big Brother Remote File Overwrite
Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...
Quest Big Brother Remote File Overwrite
Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...
Quest Big Brother Remote File Overwrite
Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...
Quest Big Brother Remote File Overwrite
Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...
CVE-2011-1595
Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...
Directory traversal
Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...
CVE-2011-1920
CVE-2011-1920 affects NetBSD make include files (bsd.lib.mk, bsd.prog.mk) as used by pmake 1.111 and related products; local users can overwrite arbitrary files via a symlink attack on a /tmp/_depend##### file. Affected: NetBSD make includes; pmake usage; vulnerability arises from insecure tempor...
CVE-2011-1595
Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...
Fedora 13 : widelands-0-0.24.build16.fc13 (2011-6110)
Rebase to new upstream release build16 - Besides various enhancements this also fixes an arbitrary file overwrite vulnerability, which could be exploited when connecting to malicious servers for internet play! Note that Tenable Network Security has extracted the preceding description block...
Fedora 14 : widelands-0-0.24.build16.fc14 (2011-6124)
Rebase to new upstream release build16 - Besides various enhancements this also fixes an arbitrary file overwrite vulnerability, which could be exploited when connecting to malicious servers for internet play! Note that Tenable Network Security has extracted the preceding description block...
Fedora 15 : widelands-0-0.24.build16.fc15 (2011-6133)
Rebase to new upstream release build16 - Besides various enhancements this also fixes an arbitrary file overwrite vulnerability, which could be exploited when connecting to malicious servers for internet play! Note that Tenable Network Security has extracted the preceding description block...
Debian DSA-2219-1 : xmlsec1 - arbitrary file overwrite
Nicolas Gregoire discovered that the XML Security Library xmlsec allowed remote attackers to create or overwrite arbitrary files through specially crafted XML files using the libxslt output extension and a ds:Transform element during signature verification. %NASLMINLEVEL 70300 C Tenable Network...
[SECURITY] [DSA 2219-1] xmlsec1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2219-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 18, 2011 http://www.debian.org/security/faq -...
CVE-2010-4229
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management ZAM in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory...
CVE-2011-0012
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...
