CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

CVE-2010-2252

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL wit...

CVE-2010-2252

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL wit...

CVE-2010-2252

CVE-2010-2252 affects GNU Wget 1.12 and earlier, where a 3xx redirect process can cause a server-provided filename to be used for destination files, potentially leading to arbitrary file writes or code execution via dotfiles in a home directory. Connected docs confirm affected package versions an...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

CVE-2010-2252

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL wit...

CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

Multiple Tripwire Interactive Games - STEAMCLIENTBLOB Multiple Denial of Service Vulnerabilities

Multiple Tripwire Interactive Games - STEAMCLIENTBLOB Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/41361/info Multiple Tripwire Interactive games are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle...

Multiple Tripwire Interactive Games - 'STEAMCLIENTBLOB' Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/41361/info Multiple Tripwire Interactive games are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle specially crafted network packets. An attacker can exploit these issues to cause the application...

Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/41352/info Freeciv is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle specially crafted network packets. An attacker can exploit these issues to cause the applications to become unresponsive or t...

Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities

Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/41352/info Freeciv is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle specially crafted network packets. An attacker can exploit...

CVE-2010-2627

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 1.5.3153-802.0 and earlier, and Battlefield 2142 1.10.48.0 and earlier, allow remote servers to overwrite arbitrary files on the client via ".." dot dot backslash sequences in URLs for the 1...

Directory traversal

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 1.5.3153-802.0 and earlier, and Battlefield 2142 1.10.48.0 and earlier, allow remote servers to overwrite arbitrary files on the client via ".." dot dot backslash sequences in URLs for the 1...

CVE-2010-2627

CVE-2010-2627 affects the Refractor 2 engine used by Battlefield 2 (1.5.3153-802.0 and earlier) and Battlefield 2142 (1.10.48.0 and earlier). The issue arises from directory traversal via ".." in URLs for specific resources: sponsor/logo, community logo, and related URLs (DemoDownloadURL, DemoInd...

CVE-2010-2627

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 1.5.3153-802.0 and earlier, and Battlefield 2142 1.10.48.0 and earlier, allow remote servers to overwrite arbitrary files on the client via ".." dot dot backslash sequences in URLs for the 1...

CVE-2010-2612

Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain sensitive information via unknown vectors...

Fedora 12 : krb5-1.7.1-2.fc12 (2010-1722)

This update adds the upstream patch to avoid a potential denial of service in the KDC in versions 1.7 and later CVE-2010-0283. It obsoletes a previous pending update to version 1.7.1, which incorporates a fix to avoid accidentally tripping account lockout logic on AD servers when the user types i...

I-net Multi User Email Script SQLi Vulnerability

I-net Multi User Email Script SQLi Vulnerability. Webapps exploit for linux platform Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi...