CVE-2006-0950

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...

CVE-2006-0950: Improper Limitation of a Pathname to a Restricted Directory

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...

Code injection

Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox"...

CVE-2006-1063

Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox"...

CVE-2006-1063

CVE-2006-1063 affects Lurker 2.0 and earlier. A remote attacker can create or overwrite files in any writable directory named “mbox” due to the vulnerability in Lurker’s handling of such directories. Debian security advisories (DSA-999-1) fix this issue by upgrading lurker to version 1.2-5sarge1 ...

CVE-2006-1063: Undefined Security Weakness

Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox"...

CVE-2006-0931: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive...

CVE-2003-1294: Undefined Security Weakness

Xscreensaver before 4.15 creates temporary files insecurely in 1 driver/passwd-kerberos.c, 2 driver/xscreensaver-getimage-video, 3 driver/xscreensaver.kss.in, and the 4 vidwhacker and 5 webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack...

GLSA-200602-14 : noweb: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200602-14 noweb: Insecure temporary file creation Javier Fernandez-Sanguino has discovered that the lib/toascii.nw and shell/roff.mm scripts insecurely create temporary files with predictable filenames. Impact : A local attacker...

Wimpy MP3 Player 5 - Text File Overwrite

Wimpy MP3 Player 5 - Text File Overwrite source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The...

[Full-disclosure] Wimpy MP3 Player - Text file overwrite vulnerability

======================================================================================= XOR Crew :: Security Advisory 2/10/2006 ======================================================================================= Wimpy MP3 Player - Text file overwrite. lame...

CVE-2005-3342

noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...

CVE-2005-3342

noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...

CVE-2005-3240

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and...

CVE-2005-3240

CVE-2005-3240 is described as a race condition in Microsoft Internet Explorer where a user-assisted drag-and-drop action could overwrite files or possibly execute code. The connected CVE-3840 records indicate this SQL injection entry is a duplicate/typo and that the correct identifier is CVE-2005...

CVE-2005-3240: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and...

Code injection

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors...

CVE-2006-0582

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors...

CVE-2006-0582

CVE-2006-0582 affects Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2. In rshd, when storing forwarded credentials, an attacker can overwrite arbitrary files and change file ownership via unknown vectors. This is a local‑impact vulnerability with low CVSS base score (2.1) per the NVD data, and ...

CVE-2006-0582

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors...