RazorCMS 1.2 - Directory Traversal

Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is vulnerable to Path Traversal, when...

OpenSSL 0.9.7 < 0.9.7f Vulnerability

The version of OpenSSL installed on the remote host is prior to 0.9.7f. It is, therefore, affected by a vulnerability as referenced in the 0.9.7f advisory. - The derchop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwri...

PYSEC-2011-23

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

mpack -- Information disclosure

The oss-security list reports: Incorrect permissions on temporary files can lead to information disclosure...

Fedora 16 : perl-PAR-1.002-5.fc16 / perl-PAR-Packer-1.010-3.fc16 (2011-16856)

This update fixes CVE-2011-4114 insecure temporary directory handling. See bug 753955 for tests. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 15 : perl-PAR-1.002-4.fc15 / perl-PAR-Packer-1.008-4.fc15 (2011-16859)

This update fixes CVE-2011-4114 insecure temporary directory handling. See bug 753955 for tests. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[USN-1308-1] bzip2 vulnerability

========================================================================== Ubuntu Security Notice USN-1308-1 December 14, 2011 bzip2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

bzip2 bzexe symbolic links vulnerability

Insecure temporary files creation...

Ubuntu Update for bzip2 USN-1308-1

Ubuntu Update for Linux kernel vulnerabilities USN-1308-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13081.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for bzip2 USN-1308-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1308-1: bzip2 vulnerability

vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable...

HP Application Lifestyle Management symbolic links vulnerability

Insecurty temporary files creation...

Microsoft Internet Explorer 缓存对象历史枚举漏洞

Microsoft Internet Explorer 是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer处理缓存对象时在实现上存在安全漏洞，远程攻击者可利用此漏洞枚举已浏览的站点，获取敏感信息 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法： 在浏览可疑站点时，启用 "InPrivate Browsing"；或不浏览可疑站点。...

Low: Red Hat Security Advisory: php-pear security and bug fix update

An updated php-pear package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

php-pear: symlink vulnerability in PEAR installer

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...

Ubuntu Update for update-manager USN-1284-1

Ubuntu Update for Linux kernel vulnerabilities USN-1284-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12841.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for update-manager USN-1284-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu: Security Advisory (USN-1284-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3154

DistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 does not properly create temporary files, which allows local users to obtain the XAUTHORITY file...

FreeBSD : kdeutils4 -- Directory traversal vulnerability (7fb9e739-0e6d-11e1-87cd-00235a5f2c9a)

Tim Brown from Nth Dimention reports : I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of t...

FreeBSD : caml-light -- insecure use of temporary files (9dde9dac-08f4-11e1-af36-003067b2972c)

caml-light uses mktemp insecurely, and also does unsafe things in /tmp during make install. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...