7182 matches found
Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite
Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite 2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinna...
Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite
2007/05/11 -------------------------------------------------------------------------------- Morovia Barcode ActiveX Professional 3.3 build 1304 Arbitrary file overwrite url: http://www.morovia.com/ price: $129 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This...
Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite
Exploit for unknown platform in category remote exploits ====================================================================== Morovia Barcode ActiveX Professional 3.3.1304 Arbitrary File Overwrite ====================================================================== 2007/05/11...
Integer overflow
Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files aka "time-of-check-time-of-use file race". NOTE: the researcher has retracted the original advisory, stating that "th...
CVE-2007-2056
AFFLIB (AFFLIB) vulnerability CVE-2007-2056 affects the getlock function in aimage/aimage.cpp, with a time-of-check-to-time-of-use file race that could allow a local attacker to overwrite an arbitrary file. The issue is reported for AFFLIB versions 2.2.8 and earlier. The race condition occurs whe...
CVE-2007-2058
CVE-2007-2058 = Directory traversal in Acubix PicoZip 4.02. Processing archives (GZ, TAR, RAR, JAR, ZIP) allows a user-assisted remote attacker to overwrite arbitrary files via a .. sequence in file paths within the archive. Based on NVD metrics, impact is partial confidentiality, integrity, and ...
DEBIAN-CVE-2007-1799
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...
CVE-2007-1799
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...
CVE-2007-1799
CVE-2007-1799 affects KTorrent prior to 2.1.3. A directory traversal vulnerability exists in torrent.cpp where only the string ".." is checked; manipulated ".." sequences in torrent filenames (e.g., "../") can allow a remote attacker to overwrite arbitrary files. This stems from an incomplete fix...
CVE-2007-0237
The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...
Code injection
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug...
CVE-2007-1444
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug...
CVE-2007-1437
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...
CVE-2007-1437
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...
DEBIAN-CVE-2007-1437
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...
CVE-2007-1437
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...
CVE-2007-1437
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...
CVE-2007-1437
Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...