CVE-2008-2540

Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the 1 Desktop directory on Windows or 2 Downloads directory on Mac OS X, and subsequently allows...

Design/Logic Flaw

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory...

CVE-2008-2147

CVE-2008-2147 affects VLC media player and relates to an untrusted search path vulnerability that could allow local privilege escalation via a malicious library placed in modules/ or plugins/ within the current working directory. Public disclosures in 2008-2009 reference VLC and related Debian/Ge...

CVE-2008-2147

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory...

CVE-2008-1274

Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory...

Design/Logic Flaw

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message...

Ubuntu 5.04 / 5.10 / 6.06 LTS : linux-source-2.6.10/2.6.12/2.6.15 vulnerabilities (USN-302-1)

An integer overflow was discovered in the doreplace function. A local user process with the CAPNETADMIN capability could exploit this to execute arbitrary commands with full root privileges. However, none of Ubuntu's supported packages use this capability with any non-root user, so this only...

CVE-2003-1452

CVE-2003-1452 describes an untrusted search path vulnerability in Qualcomm qpopper 4.0–4.05. The root cause is PATH environment variable manipulation that causes the daemon to execute a malicious smbpasswd program, enabling local users to run arbitrary code. The available records consistently sta...

CVE-2007-5618

CVE-2007-5618 refers to an unquoted Windows search path vulnerability in VMware products (Workstation, Player, Server, ACE) prior to specified fixed versions. The issue allows local users to gain privileges by exploiting improperly quoted paths in Authorization and other services. Affected ranges...

Design/Logic Flaw

Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain...

CVE-2007-5023

CVE-2007-5023 describes an unquoted Windows search path vulnerability that could allow local users to gain privileges in EMC VMware products. Affected are VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, VMware Player before 1.0.5 Build 56455 and Player 2 before 2.0.1...

[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1287-1 [email protected] http://www.debian.org/security/ Noah Meyerhans May 07, 2007 - ------------------------------------------------------------------------ Package : ldap-account-manager...

Persism CMS 0.9.2 - system[path] Remote File Inclusion

Persism Content Management System = 0.9.2 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.persism.com/emil/0.9.2/0.9.2.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/modules/blocks/headerfile.php?systempath=Shell...

Web Slider 0.6 (path) Remote File Inclusion Vulnerabilities

No description provided by source. Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell...

CVE-2007-2027

CVE-2007-2027 affects Elinks 0.11.1 (ELinks) via the function add_filename_to_string in intl/gettext/loadmsgcat.c, allowing a local attacker to cause Elinks to load an untrusted gettext catalog (.po) from a ../po directory and potentially perform format-string attacks. Multiple connected sources ...

CVE-2006-7191

The CVE-2006-7191 vulnerability affects LDAP Account Manager (LAM) via lamdaemon.pl, where an untrusted PATH can let local users execute a malicious rm and gain privileges. Public advisories (DSA-1287-1 for Debian) confirm the issue and provide remediation by upgrading ldap-account-manager to a f...

IP3 NetAccess < 4.1.9.6 Remote Arbitrary File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits ====================================================================== IP3 NetAccess 4.1.9.6 Remote Arbitrary File Disclosure Vulnerability ====================================================================== I - TITLE Security advisory:...

phpXD 0.3 - path Remote File Inclusion

phpXD 0.3 - path Remote File Inclusion | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:phpxd Affected Version:0.3...

CVE-2007-0022

CVE-2007-0022: Mac OS X 10.4.8 writeconfig untrusted search path allows local privilege escalation by manipulating PATH to point to a malicious launchctl. The vulnerability stems from an untrusted search path in writeconfig, enabling a local user to gain privileges. Public details in the connecte...

CVE-2002-2221

The CVE-2002-2221 entry describes an untrusted search path vulnerability in chetcpasswd (Pedro Lineu Orso) versions 2.4.1 and earlier. The underlying issue is a modified PATH that can reference a malicious cp binary, enabling local users to gain privileges. Documented impact is local privilege es...