Symantec pcAnywhere CHF File Pathname Format String Denial of Service

The version of Symantec pcAnywhere installed on the remote Windows host does not properly handle format strings within remote control file names '.CHF' or their associated file paths. Using a specially crafted file or path name, a local user may be able to exploit this issue to read or write...

linux/x86 file reader 65 bytes + pathname

No description provided by source. / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xor %ecx, %ecx xor %edx, %edx jmp two one: pop %ebx movb $5, %al xor %ecx, %ecx int $0x80 mov %eax, %esi jmp read exit: movb $1, %al xor %ebx, %eb...

linux/x86 file reader 65 bytes + pathname

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 file reader 65 bytes + pathname ========================================= / Linux/x86 file reader. 65 bytes + pathname Author: certaindeath Source code: start: xor %eax, %eax xor %ebx, %ebx xo...

Microsoft Word 2007 Sensitive Information Disclosure Vulnerability

Microsoft Word is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the...

Path traversal

Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform OCP 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter...

CVE-2009-0241

Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...

CVE-2009-0241

Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...

CVE-2009-0241

Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...

CVE-2009-0241

Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...

Moodle 'filter/tex/texed.php' 'pathname' Parameter Remote Command Execution

The version of Moodle installed on the remote host fails to sanitize user-supplied input to the 'pathname' parameter before using it in the 'filter/tex/texed.php' script in a commandline that is passed to the shell. Provided that PHP's 'registerglobals' setting and the TeX Notation filter has bot...

Design/Logic Flaw

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071...

CVE-2008-5341

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071...

CVE-2008-4924

Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control BARCODELib.MW6Barcode, Barcode.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

Design/Logic Flaw

Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control BARCODELib.MW6Barcode, Barcode.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

Design/Logic Flaw

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control AZTECLib.MW6Aztec, Aztec.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4924

CVE-2008-4924 : Multiple insecure method vulnerabilities in MW6 Technologies’ 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll 3.0.0.1) allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods. The issue is trigg...

Opera Remote Code Execution and Information Disclosure Vulnerabilities (Windows)

The host is installed with Opera Web Browser and is prone to remote code execution and information disclosure Vulnerabilities. OpenVAS Vulnerability Test $Id: gboperainfodiscncodeexecwin.nasl 6519 2017-07-04 14:08:14Z cfischer $ Opera Remote Code Execution and Information Disclosure Vulnerabiliti...

Design/Logic Flaw

Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context...

CVE-2008-4695

CVE-2008-4695 affects Opera prior to 9.60. An attacker can predict the cache path of a cached Java applet and load it from the cache, causing the applet to execute in the local machine context and potentially expose sensitive data. Connected disclosures (SUSE/Gentoo GLSA entries) confirm Opera mu...