1358 matches found
CVE-2006-4233
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information proxy certificates and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by 1 myproxy-admin-adduser, 2 grid-ca-sign, and...
CVE-2006-4233
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 are affected by a local‑only race condition in temporary file handling (in /tmp) that can let an attacker obtain proxy certificates and overwrite arbitrary files via a symlink attack. The issue is demonstrated by files created by myproxy-admi...
CVE-2006-4233: Undefined Security Weakness
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information proxy certificates and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by 1 myproxy-admin-adduser, 2 grid-ca-sign, and...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)
Exploit for hardware platform in category remote exploits =================================================================== Barracuda Spam Firewall /cgi-bin/previewemail.cgi?file=/mail/mlog/../tmp/backup/periodicconfig.txt.tmp https:///cgi-bin/previewemail.cgi?file=/mail/mlog/../../bin/ls%20/|...
Mozilla Firefox <= 1.5.0.4 Javascript Navigator Object Code Execution PoC
No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...
ejabberd installation script symbolic links problem
Insecure /tmp files creations...
GLSA-200604-13 : fbida: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200604-13 fbida: Insecure temporary file creation Jan Braun has discovered that the 'fbgs' script provided by fbida insecurely creates temporary files in the '/var/tmp' directory. Impact : A local attacker could create links in th...
CVE-2006-1892: Undefined Security Weakness
avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/avast4 temporary directory...
linux/x86 SWAP store shellcode 99 bytes
Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 SWAP store shellcode 99 bytes ======================================= / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors...
linux/x86 SWAP store shellcode 99 bytes
No description provided by source. / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx [email protected] spud [email protected] This shellcode reads the content of '/tmp/sws' and stores on swap device at offset 3133...
Avast Linux Home Edition (vulnerability on a temporary folder creation)
Title : Avast Linux Home Edition, vulnerability on a temporary folder creation Protuct : Avast! Linux Home Edition Product : http://www.avast.com/eng/download-avast-for-linux-edition.html Version : 1.0.5, 1.0.5-1 avast4workstation-1.0.5-1.i586.rpm avast4workstation-1.0.5.tar.gz Vuln Found :...
DEBIAN-CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
CVE-2006-1566
Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the tunepimp.so module, which might allow local users to gain privileges by installing malicious libraries in that directory...
Design/Logic Flaw
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the 1 modauthzsvn.so and 2 moddavsvn.so modules, which might allow local users to gain privileges by installing malicious libraries in that...
DEBIAN-CVE-2006-1564
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the 1 modauthzsvn.so and 2 moddavsvn.so modules, which might allow local users to gain privileges by installing malicious libraries in that...
CVE-2006-1565
Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the LinuxGpib.so module, which might allow local users to gain privileges by installing malicious libraries in that directory...
[Full-disclosure] capi4hylafax insecure manipulation with tmp files
capi4hylafax suite http://freshmeat.net/projects/capi4hylafax/ is addon for hylafax fax server http://www.hylafax.org/ vulnerable: capi4hylafax-01.03.00 /probably others/ in capi4hylafax-01.03.00/src/faxrecv/faxrecv.cpp : ifdef GENERATEDEBUGSFFDATAFILE dwarning DebugSffDataFile == 0; if...
Information disclosure
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to 1 the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and 2 the tmp directory, which lists names of uploaded attachments...
CVE-2006-0893
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to 1 the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and 2 the tmp directory, which lists names of uploaded attachments...
CVE-2006-0893
NOCC Webmail 1.0 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting files in (1) the profiles directory (exposing e-mail addresses from profile filenames) and (2) the tmp directory (revealing uploaded attachment names). T...