CVE-2006-1355

avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files...

CVE-2006-1355

avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files...

[Full-disclosure] capi4hylafax insecure manipulation with tmp files

capi4hylafax suite http://freshmeat.net/projects/capi4hylafax/ is addon for hylafax fax server http://www.hylafax.org/ vulnerable: capi4hylafax-01.03.00 /probably others/ in capi4hylafax-01.03.00/src/faxrecv/faxrecv.cpp : ifdef GENERATEDEBUGSFFDATAFILE dwarning DebugSffDataFile == 0; if...

Apple MacOS X passwd privilege escalation

Few vulnerabilities symbolic links, race conditions allow any system files editing...

mb_send_mail() PHP safe mode protection bypass

mbsendmail and imap unfctions allow to access system files...

NSA Group Security Advisory NSAG-№201-25.02.2006 Vulnerability SPiD v1.3.1

Advisory: NSAG-№201-25.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: SPiD v1.3.1 Site of manufacturer: http://spid.adnx.net/ The status: 19/01/2006 - Publication is postponed. 14/02/2006 -...

Archive_Tar v 1.2(Tested) (Tar file management class) Directory traversal

ArchiveZipr Zip file management class Directory traversal This class provides handling of tar files in PHP. It supports creating, listing, extracting and adding to tar files. Gzip support is available if PHP has the zlib extension built-in or loaded. Bz2 compression is also supported with the bz2...

sglMerchant Information Disclosure Vulnerability

A CGI viewitem that is a part of sglMerchant is installed. This CGI suffers from a security vulnerability that makes it possible to escape the bounding HTML root directory and read arbitrary system files. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text...

Allaire/Macromedia JRun Directory Traversal Vulnerability (MPSB01-17) - Active Check

Allaire/Macromedia JRun is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

gnats.txt

Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system gnats user, whe...

Vulnerability: McGallery v 1.1 files reading on disk

Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: files reading on disk Consequences: Web server paths are opened Risk: High Description: Attacker can form the query in URL form ang get the access to the system files Example:...

apexec.txt

Example: www.victim.com/cgi-bin/apexec.pl?template=.%00./.%00./.%00./.%00./.%00./.%00./etc/passwd%%0000.html Greetz MSDarkflyer --...

CVE-2004-0824

PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files...

CVE-2004-0824

CVE-2004-0824 affects Mac OS X PPPDialer (versions 10.2.8–10.3.5). The issue is a local, non-privileged attacker could exploit a symlink in PPPDialer log files to overwrite system files, potentially impacting integrity. cvss2 base score 2.1 (Low), with local access required and no authentication....

FastStone 4in1 Browser 1.2 - Web Server Directory Traversal

source: https://www.securityfocus.com/bid/12937/info A vulnerability has been identified in the handling of certain types of requests by the 4in1 Browser Web server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. This issue could be exploited...

FastStone 4in1 Browser 1.2 - Web Server Directory Traversal

FastStone 4in1 Browser 1.2 - Web Server Directory Traversal source: https://www.securityfocus.com/bid/12937/info A vulnerability has been identified in the handling of certain types of requests by the 4in1 Browser Web server. Because of this, it is possible for an attacker to gain access to...

holaCMS149.txt

-------------------------------------------------------------------- Virginity Security Advisory 2005-001 - - - -------------------------------------------------------------------- DATE : 2005-03-12 15:45 GMT TYPE : remote VERSIONS AFFECTED : Of course you'll have to edit target and...

phpbb -- multiple vulnerabilities

phpBB is vulnerable to remote exploitation of an input validation vulnerability allows attackers to read the contents of arbitrary system files under the privileges of the webserver. This also allows remote attackers to unlink arbitrary system files under the privileges of the webserver...

GLSA-200502-01 : FireHOL: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200502-01 FireHOL: Insecure temporary file creation FireHOL insecurely creates temporary files with predictable names. Impact : A local attacker could create malicious symbolic links to arbitrary system files. When FireHOL is...

Low: Red Hat Security Advisory: unarj security update

An updated unarj package that fixes a buffer overflow vulnerability and a directory traversal vulnerability is now available. The unarj program is an archiving utility which can extract ARJ-compatible archives. A buffer overflow bug was discovered in unarj when handling long file names contained ...