CVE-2008-5275

CVE-2008-5275 affects net2ftp versions 0.96 stable and 0.97 beta, specifically the (a) Unzip archive and (b) Upload files and archives functionality. A directory traversal flaw allows remote attackers to create, read, or delete arbitrary files by abusing a .. in a filename inside a TAR or ZIP arc...

plugin: improper Implementation of shellescape() (arbitrary code execution)

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a tar archive and possibly 2 the filename of the first file in a tar archive, which is not properly...

vim security update

7.0.109-4.4z - fix netrw 7.0.109-4.3z - fixes CVE-2008-3074 tar plugin - fixes CVE-2008-3075 zip plugin - fixes CVE-2008-3076 netrw plugin - fixes CVE-2008-4101 keyword and tag lookup 7.0.109-4.2z - fix some issues with netrw and remote file editing caused by the CVE-2008-2712 patch 7.0.109-4.1z ...

DEBIAN-CVE-2008-5141

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...

GNU tar buffer overflow

No description provided...

Gentoo Security Advisory GLSA 200603-06 (tar)

The remote host is missing updates announced in advisory GLSA 200603-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200709-09 (tar)

The remote host is missing updates announced in advisory GLSA 200709-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-06 (tar)

The remote host is missing updates announced in advisory GLSA 200603-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200612-10 (tar)

The remote host is missing updates announced in advisory GLSA 200612-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200612-10 (tar)

The remote host is missing updates announced in advisory GLSA 200612-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-07:05.libarchive.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:05.libarchive.asc ADV FreeBSD-SA-07:05.libarchive.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 20...

FreeBSD Ports: viewcvs

The remote host is missing an update to the system as announced in the referenced advisory. VID 323784cf-48a6-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-06:26.gtar.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:26.gtar.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-06:26.gtar.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:26.gtar.asc ADV FreeBSD-SA-06:26.gtar.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-07:05.libarchive.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:05.libarchive.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-07:10.gtar.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:10.gtar.asc ADV FreeBSD-SA-07:10.gtar.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Vim 7.2c.002 Fixes Arbitrary Command Execution when Handling Tar Archives

Vim 7.2c.002 Fixes Arbitrary Command Execution when Handling Tar Archives 1. SUMMARY Product : Vim -- Vi IMproved Version : Vim = 7.0 possibly older, fixed in 7.2c.002 autoload/tar.vim version = 9 possibly older Impact : Arbitrary code execution Wherefrom: Local, remote Original :...

Vim: Unfixed Vulnerabilities in Tar Plugin Version 20

Vim: Unfixed Vulnerabilities in Tar Plugin Version 20 1. SUMMARY Product : Vim -- Vi IMproved Version : Vim = 7.0 possibly older, present in 7.2c.002 autoload/tar.vim = 9 possibly older, present in version 20 Impact : Arbitrary code execution Wherefrom: Local, remote CVE : CVE-2008-2712 Original ...

Debian Security Advisory DSA 987-1 (tar)

The remote host is missing an update to tar announced via advisory DSA 987-1. Jim Meyering discovered several buffer overflows in GNU tar, which may lead to the execution of arbitrary code through specially crafted tar archives. The old stable distribution woody is not affected by this problem...

Debian Security Advisory DSA 1223-1 (tar)

The remote host is missing an update to tar announced via advisory DSA 1223-1. Teemu Salmela discovered a vulnerability in GNU tar that could allow a malicious user to overwrite arbitrary files by inducing the victim to attempt to extract a specially crafted tar file containing a GNUTYPENAMES...