CVE-2010-3691

CVE-2010-3691 affects phpCAS (in Moodle) prior to version 1.1.3. When proxy mode is enabled, PGTStorage/pgt-file.php is vulnerable to a local symlink attack that allows a local user to overwrite arbitrary files. The exposed component is phpCAS in Moodle installations, with potential for file over...

Mandriva Update for perl-libwww-perl MDVSA-2010:167 (perl-libwww-perl)

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Mandriva Update for perl-libwww-perl MDVSA-2010:167 perl-libwww-perl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribu...

Mandriva Linux Security Advisory : wget (MDVSA-2010:170)

A vulnerability has been found and corrected in wget : GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a...

Mandriva Linux Security Advisory : perl-libwww-perl (MDVSA-2010:167)

A vulnerability has been found and corrected in perl-libwww-perl : lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2...

spice-xpi symlink attack

The SPICE aka spice-xpi plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file...

CVE-2010-3098

Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3098

CVE-2010-3098 affects IoRush Software FTP Rush 1.1.3 (and possibly earlier). The issue is a directory-traversal flaw caused by insufficient sanitization of the downloaded filename, allowing a remote FTP server to push a filename containing traversal sequences (e.g., ..) and overwrite arbitrary fi...

RHEL 5 : kernel (RHSA-2010:0610)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0610 advisory. - kernel: bluetooth: potential bad memory access with sysfs files CVE-2010-1084 - kernel: ext4: Make sure the MOVEEXT ioctl can't overwrite...

[SECURITY] [DSA 2085-1] New lftp packages fix file overwrite vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-2085-1 [email protected] http://www.debian.org/security/ Sebastien Delafond August 03, 2010 http://www.debian.org/security/faq -...

lftp security update

CentOS Errata and Security Advisory CESA-2010:0585 An updated lftp package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

DSA-2085-1 lftp - file overwrite vulnerability

Bulletin has no description...

Moderate: Red Hat Security Advisory: lftp security update

An updated lftp package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

CVE-2010-2056

GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2010-2056

GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2010-2056

GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

perl security update

CentOS Errata and Security Advisory CESA-2010:0505 An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability...

lftp file overwrite

Downloaded file name in lftpget may be set by server without user confirmation...

CUPS < 1.4.4 Multiple Vulnerabilities

According to its banner, the version of CUPS installed on the remote host is earlier than 1.4.4. Such versions are affected by several vulnerabilities : - The patch for STR 3200 / CVE-2009-3553 was not complete. A remote client can cause a denial of service by causing the CUPS server to reference...

CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...