9270 matches found
CVE-2003-1280
CVE-2003-1280: A directory traversal flaw in cgihtml 1.69 enables remote attackers to overwrite or create arbitrary files via .. in multipart/form-data uploads. Connected Red Hat/CVE records reiterate the same vulnerability details. The available documents do not provide a remediation or patch ve...
CVE-2003-1279
CVE-2003-1279 affects S-PLUS 6.0 and enables local users to overwrite arbitrary files via a symlink attack on multiple temporary files (e.g., /tmp/__F8499, /tmp/PRINT.$$.out, /tmp/SUBST$PID.TXT, /tmp/ed.cmds$PID, /tmp/file.1, /tmp/file.2, /tmp/sgml2html$$tmp, etc.). The underlying issue is a syml...
CVE-2003-1281: Undefined Security Weakness
cgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain temporary files...
Acme thttpd < 2.24 CGI Test Script Symlink Arbitrary File Overwrite
Binary data 3282.prm...
wu-ftpd rnfr file overwrite
The remote Wu-FTPd server seems to be vulnerable to a remote flaw. This version contains a flaw that may allow a malicious user to overwrite arbitrary files. The issue is triggered when an attacker sends a specially formatted rnfr command. This flaw will allow a remote attacker to overwrite any...
wu-ftpd rnfr file overwrite
The remote Wu-FTPd server seems to be vulnerable to a remote flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
scp File Create/Overwrite
You are running OpenSSH 1.2.3, or 1.2. This version has directory traversal vulnerability in scp, it allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack. OpenVAS Vulnerability Test $Id: sshscp.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: scp File...
NTOP < 3.2 ntop.init Temporary File Symlink Arbitrary File Overwrite
Binary data 3272.prm...
CVE-2005-3331: Undefined Security Weakness
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-3311
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-2502: Undefined Security Weakness
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcherPID temporary file...
CVE-2005-2748: Undefined Security Weakness
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application...
CVE-2005-2126: Undefined Security Weakness
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted...
CVE-2005-2992
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...
CVE-2005-2992
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...
CVE-2005-2992
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...
CVE-2005-2992
CVE-2005-2992 affects arc up to version 5.21j; vulnerability arises from a symlink attack on temporary files, allowing local users to overwrite arbitrary files. This is a local privilege issue with world-readable temporary files (per the SUSE advisory). Connected documents provide the affected co...
security flaw
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command...
Mandrake Linux Security Advisory : texinfo (MDKSA-2005:175)
Frank Lichtenheld has discovered that texindex insecurely creates temporary files with predictable filenames. This is exploitable if a local attacker were to create symbolic links in the temporary files directory, pointing to a valid file on the filesystem. When texindex is executed, the file wou...
GLSA-200510-04 : Texinfo: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200510-04 Texinfo: Insecure temporary file creation Frank Lichtenheld has discovered that the 'sortoffline' function in texindex insecurely creates temporary files with predictable filenames. Impact : A local attacker could create...