Code injection

WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file...

PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass

WinExec"cmd.exe /c $command "$...

CVE-2007-4400

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

Moderate: Red Hat Security Advisory: file security update

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

samba heap overflows

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...

Moderate: file security update

4.10-3.EL4.5 - Resolves: 233161: CVE-2007-1536: file 4.20 fixes a heap overflow in that can result in arbitrary code...

php remote file inclusion vulnerability-vulnerability warning-the black bar safety net

Author:Zizzy Two years ago the article, to estimate for the php contains a vulnerability smattering of 2004-3-7 In this article I will tell php remote file inclusion vulnerability principle, the beginning involved a programmer who must-see. The first question is, what is”remote file inclusion...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...

Symantec Brightmail AntiSpam multiple security vulnerabilities

It's possible to DoS system and access system files if control center access is enabled from any computer...

CVE-2006-2910

CVE-2006-2910 describes a buffer overflow in jetAudio 6.2.6.8330 (Basic) and possibly other versions. The vulnerability is triggered when an audio file (e.g., WMA) contains long ID3 tag values for Title, Author, or Album, causing an overflow in the tooltip display string if the sound card driver ...

[SA18159] Information Call Center "CallCenterData.mdb" Exposure of User Credentials

TITLE: Information Call Center "CallCenterData.mdb" Exposure of User Credentials SECUNIA ADVISORY ID: SA18159 VERIFY ADVISORY: http://secunia.com/advisories/18159/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Information Call Center...

CVE-2004-2591

The CVE-2004-2591 issue affects ButtUglySoftware CleanCache 2.19. The vulnerability arises from the data-overwrite capability not properly overwriting data in files, allowing recovery of previously stored data. According to the records, the impact is partial confidentiality with a local attack ve...

simplephpBlog040.txt

. || | | .. \ \ | \ | | | | | |\ | | /| | /|/ | || || / Where is the security? ... Security Advisory 2005-0x00 Authors......... pjphem && LazyCrs Date............ 07/07/2005 Vendor.......... www.simplephpblog.com Type............ SimplePHPBlog 0.4.0 = Remote Password Disclosure o The Problem:...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

GLSA-200501-33 : MySQL: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200501-33 MySQL: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the 'mysqlaccess' script creates temporary files in world-writeable directories with predictab...

CVE-2005-0225

CVE-2005-0225 affects FireHOL: FireHOL (before 1.224) insecurely creates temporary files with predictable names, enabling local users to overwrite arbitrary files via a symlink attack. Documented in OSV OSV-2005-0225 and Gentoo GLSA 200502-01; Gentoo and Debian advisories reference the same issue...

Debian DSA-664-1 : cpio - broken file permissions

It has been discovered, that cpio, a program to manage archives of files, creates output files with -O and -F with broken permissions due to a reset zero umask which allows local users to read or overwrite those files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...

Samba vulnerable to integer overflow processing file security descriptors

Overview Samba contains an integer overflow vulnerability in code that processes file security descriptors. This could allow an authenticated, remote attacker to execute arbitrary code or cause a denial of service on a vulnerable system. Description Samba is an open-source implementation of...

USN-3-1: GhostScript utility script vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities "pv.sh" and "ps2epsi" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...