CVE-2007-4462

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file...

DEBIAN-CVE-2007-4462

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4462

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file...

ArgoSoft Mail Server MLSRVX.DLL任意文件覆盖漏洞

ArgoSoft Mail Server是一款多功能的邮件服务程序。 ArgoSoft Mail Server存在任意文件覆盖问题，远程攻击者可以利用漏洞进行拒绝服务攻击。 问题存在于MLSRVX.DLL中。使用恶意的ActiveX控件，调用不安全的方法，诱使用户访问可覆盖目标用户系统上的文件，造成拒绝服务攻击，或可能以登录用户进程权限执行任意指令。 ArGo Software Design ArGoSoft Mail Server 1.8.9.1 目前没有解决方案提供： http://www.argosoft.com/rootpages/MailServerNet/Default.as...

VMware IntraProcessLogging.dll 5.5.3.42958 Arbitrary Data Write Exploit

No description provided by source. !-- --------------------------------------------------------------------------- :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: IntraProcessLogging.dll 5.5.3.42958 VmWare Inc Arbitrary Data Write Exploit...

clever-overwrite.txt

------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2007-3531

NVClock (backend/backend.c) is vulnerable prior to 0.8b2: a symlink attack on /tmp/nvclock allows a local user to overwrite arbitrary files. This is a local-privilege issue with complete confidentiality, integrity, and availability impact as described, enabling arbitrary code execution via insecu...

CVE-2007-3531: Undefined Security Weakness

The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file...

Security feature bypass

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

CVE-2007-3883

CVE-2007-3883 affects the Data Dynamics ActiveBar ActiveX control (actbar3.ocx) version 3.2 and earlier. The vulnerability allows remote attackers to create or overwrite files by providing a full pathname as an argument to the Save method, or to the first argument of SaveLayoutChanges or SaveMenu...

CVE-2007-3883: Undefined Security Weakness

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

[Eleytt] 7LIPIEC2007

Eleytt Research www.eleytt.com Overview/Credit: ==================== Michal Bucko www.eleytt.com/michal.bucko sapheal.hack.pl Vulnerability Table =================== 1. Firefox 2.0.0.4 Remote Denial of Service Vulnerability 2. Microsoft Register Server Remote Denial of Service Issue 3. FreeWRL...

vafileoverwrite-06-039.txt

Portcullis Security Advisory 06-039 Vulnerable System: Visionsoft Audit Vulnerability Title: The VSAOD server allows unauthenticated arbitrary file overwrites. Vulnerability Discovery and Development: Portcullis Security Testing Services during an application assessment. Further research was...

Code injection

The Nonnoi ASP/Barcode ActiveX control nonnoiASPBarcode.dll allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

Chilkat Zip ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 24806 Chilkat Zip是一个功能强大的ActiveX控件，允许建立及管理压缩文件。 Chilkat Zip ActiveX控件在处理请求参数时存在漏洞，远程攻击者可能利用此漏洞破坏用户系统上的文件。 Chilkat Zip ActiveX控件（ChilkatZip2.dll）的SaveLastError和WriteExe方式没有正确地验证用户输入。如果用户受骗访问了恶意站点并向上述方式传送了恶意参数的话，就可能导致覆盖任意系统文件。 Chilkat Software Chilkat Zip 12.4.2.0...

CVE-2007-3633: Undefined Security Weakness

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

CVE-2007-3660: Undefined Security Weakness

The Nonnoi ASP/Barcode ActiveX control nonnoiASPBarcode.dll allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function...

CVE-2007-2837

The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...