IBM AIX utilities multiple security vulnerabilities

Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...

CVE-2006-5002

Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...

CVE-2006-5004

CVE-2006-5004 describes an unspecified vulnerability in the rdist command on IBM AIX 5.2.0 and 5.3.0 that allows local users to overwrite arbitrary files via unspecified vectors . The Connected documents reference vendor patches related to AIX components (e.g., PTFs U807065/U808211 for bos.net.tc...

CVE-2006-5008

Summary: CVE-2006-5008 affects IBM AIX 5.2.0 and 5.3.0, specifically via the utape component, allowing attackers to remotely execute arbitrary commands and overwrite arbitrary files through unspecified vectors. The vulnerability is rated high (CVSS v2 base score 10.0) with network access, low att...

CVE-2006-5004: Undefined Security Weakness

Unspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to overwrite arbitrary files via unspecified vectors...

[SA22062] IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability

TITLE: IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability SECUNIA ADVISORY ID: SA22062 VERIFY ADVISORY: http://secunia.com/advisories/22062/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: ...

CVE-2006-4346

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

CVE-2006-4233: Undefined Security Weakness

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information proxy certificates and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by 1 myproxy-admin-adduser, 2 grid-ca-sign, and...

CVE-2006-3813

A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information...

CVE-2006-4049

CVE-2006-4049 concerns an unspecified local vulnerability in the utxconfig utility of Sun Ray Server Software 3.x that allows local users to create or overwrite arbitrary files via unknown attack vectors. The linked Nessus plugins reference Sun patch 114880-12 as a remediation for Sun Ray Server ...

CVE-2006-4013

CVE-2006-4013 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is accessible from any computer, remote attackers can exploit directory traversal in the DATABLOB-GET and DATABLOB-SAVE requests to read and overwrite files. The vulnerability enables remote access w...

CVE-2006-3619: Undefined Security Weakness

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences...

RadScripts - 'a_editpage.php?Filename' Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/19128/info Multiple Rad Scripts products are prone to an authentication-bypass vulnerability. These issues occur because the applications fail to prevent an attacker from accessing admin scripts directly without requiring authentication. A remote attacker...

RadScripts - a_editpage.php?Filename Arbitrary File Overwrite

RadScripts - aeditpage.php?Filename Arbitrary File Overwrite source: https://www.securityfocus.com/bid/19128/info Multiple Rad Scripts products are prone to an authentication-bypass vulnerability. These issues occur because the applications fail to prevent an attacker from accessing admin scripts...

CVE-2006-3593

The command line interface CLI in Cisco Unified CallManager CUCM 5.01 through 5.03a allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704...

CVE-2006-3593

The command line interface CLI in Cisco Unified CallManager CUCM 5.01 through 5.03a allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704...

CVE-2006-3593

CVE-2006-3593 affects Cisco Unified CallManager (CUCM) in versions 5.0(1) through 5.0(3a). The vulnerability enables local users to overwrite arbitrary files by redirecting a command’s output to a file or folder, described as bug CSCse31704. The connected documents confirm the affected product an...

CVE-2006-3426: Undefined Security Weakness

Directory traversal vulnerability in a PatchLink Update Server PLUS before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and b Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. dot dot sequence in the 1 action, 2 agentid, or 3 index parameters ...

CVE-2006-3326

Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. dot dot sequences in filenames within 1 TAR,2 GZ, and 3 JAR archives. NOTE: the provenance of this information is unknown; the details are obtained solely...

DEBIAN-CVE-2006-3324

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine ioquake3 before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory fshomepath cvar via a long string of filenames, as contained in the neededpaks buffer...