9186 matches found
Remote file inclusion
Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager WHM allows remote attackers to execute arbitrary code via a URL in the obj parameter. NOTE: a third party claims that this issue is not file inclusion because the contents are not parsed, but the attack can be used...
CVE-2007-0657
Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command...
CVE-2007-0657: Undefined Security Weakness
Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command...
CVE-2007-0476: Undefined Security Weakness
The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2007-0469
The CVE-2007-0469 issue affects RubyGems before 0.9.1. The extract_files function in installer.rb can overwrite existing files without checking for their existence, allowing user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via craft...
CVE-2007-0469: Undefined Security Weakness
The extractfiles function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages...
CVE-2006-6939
GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...
CVE-2006-6939
GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...
CVE-2007-0166: Undefined Security Weakness
The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local root users to overwrite arbitrary files, or mount/unmount files, outside of the jail via a symlink...
DEBIAN-CVE-2007-0159
Directory traversal vulnerability in the GeoIPupdatedatabasegeneral function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers possibly only update.maxmind.com to overwrite arbitrary files via a .. dot dot in the database filename, which is returned by a request to...
CVE-2007-0159
Directory traversal vulnerability in the GeoIPupdatedatabasegeneral function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers possibly only update.maxmind.com to overwrite arbitrary files via a .. dot dot in the database filename, which is returned by a request to...
CVE-2007-0100
The CVE-2007-0100 entry describes a vulnerability in the Perforce client where the client does not restrict the set of files it overwrites after receiving a server request. The root cause is that the client can overwrite arbitrary files if the server or a malicious server is used, by modifying th...
CVE-2007-0100: Undefined Security Weakness
The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...
security flaw
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPENAMES record with a symbolic link, which is not properly handled by the extractarchive function in extract.c and extractmangle function in...
CVE-2006-5584: Undefined Security Weakness
The Remote Installation Service RIS in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS...
CVE-2006-6328
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the aliasfile parameter...
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
------------------------------------------------------------------------ Debian Security Advisory DSA-1223-1 [email protected] http://www.debian.org/security/ Noah Meyerhans December 01, 2006 - ------------------------------------------------------------------------ Package : tar Vulnerability...
DSA-1223-1 tar
Bulletin has no description...
GLSA-200611-23 : Mono: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200611-23 Mono: Insecure temporary file creation Sebastian Krahmer of the SuSE Security Team discovered that the System.CodeDom.Compiler classes of Mono create temporary files with insecure permissions. Impact : A local attacker...