7173 matches found
CVE-2005-2054
Affected software: RealPlayer 10/10.5 (6.0.12.1040–1069) and RealOne Player v1/v2. Description indicates a vulnerability that could let remote attackers overwrite arbitrary files or run arbitrary ActiveX controls via a crafted MP3 file. Root cause and patch details are not provided in the documen...
RealPlayer multiple vulnerabilities
Heap overflow on RealText format parsing. Heap overflow on AVI files parsing. Possibility to overwrite local files, ActiveX execution from MP3 file...
CVE-2001-1494
CVE-2001-1494 affects util-linux (and mount) prior to versions updated in RHSA-2005:782. The issue is a hardlink-based flaw in the script command: a local attacker can create a hardlink named typescript in a writable directory, and when the script command is run by root, the attacker’s file can b...
[SA15723] Sun Solaris lpadmin Arbitrary File Overwrite Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation
Gentoo Linux Security Advisory GLSA 200506-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GNU shtool, ocaml-mysql: Insecure temporary file creation
Background GNU shtool is a compilation of small shell scripts into a single shell tool. The ocaml-mysql package includes the GNU shtool code. Description Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames CAN-2005-1751. On closer inspection,...
security flaw
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...
CVE-2005-1880
Vulnerability summary (CVE-2005-1880) everybuddy versions 0.4.3 and earlier are affected. Local users can overwrite arbitrary files through a symlink attack on a temporary file created by a system call to wget. The PT-2005-2837 entry confirms the affected versions and describes the issue as a sym...
PT-2005-2836 · Lutelwall · Lutelwall
Name of the Vulnerable Software and Affected Versions: LutelWall versions 0.97 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. This is a result of a symlink attack vulnerability...
CVE-2005-1846
Multiple directory traversal vulnerabilities in YaMT before 0.52 allow attackers to overwrite arbitrary files via the 1 rename or 2 sort options...
CVE-2004-2097
Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on 1 /tmp/fvwm-bug created by fvwm-bug, 2 /tmp/wmmenu created by wm-oldmenu2new, 3 /tmp/rates created by x11perfcomp, 4 /tmp/xf86debug.1.log created by xf86debug, 5 /tmp/.winpopup-new created by...
shtool insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shtool insecure temporary file creation Vendor: http://www.gnu.org/software/shtool/ Advisory: http://www.zataz.net/adviso/shtool-05252005.txt Vendor informed: no more vendor Exploit available: yes Impact : low Exploitation : low shtool contain a...
CVE-2004-1951
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the 1 audio.sunaudiodevice or 2 dxr3.devicename options in an MRL link...
CVE-2004-1951
CVE-2004-1951 affects xine 1.x (alpha/beta, 1.0rc through 1.0rc3a) and xine-ui 0.9.21–0.9.23. The vulnerability allows a remote attacker to overwrite arbitrary files via MRL links using the audio.sun_audio_device or dxr3.devicename options. Impact is arbitrary file writes within the permissions o...
CVE-2003-1155
X-CD-Roast 0.98 alpha10 through alpha14 is vulnerable to a local symlink attack that allows a local user to overwrite arbitrary files. Affected: X-CD-Roast 0.98 alpha10–alpha14. Root cause: symlink manipulation enabling file overwrite. Impact: as described, enables partial impact to confidentiali...
CVE-2004-2014
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded...
CVE-2004-1808
The CVE-2004-1808 issue concerns Extcompose in metamail, where the tool does not verify the output file before writing, permitting a local user to overwrite arbitrary files via a symlink attack. Affected component: Extcompose/m metamail (exact version not specified in provided documents). Root ca...
CVE-2004-1894
The CVE-2004-1894 issue concerns TEXutil in ConTEXt. When TEXutil is run with the --silent option, a local user can cause a symlink attack on texutil.log to overwrite arbitrary files. Affected component: TEXutil/ConTEXt. Root cause: symlink handling during silent mode leading to unauthorized file...