CVE-2008-0666

Website META Language WML 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on 1 the /tmp/pe.tmp.$$ temporary file used by wmlcontrib/wmg.cgi and 2 temporary files used by wmlbackend/p3eperl/eperlsys.c...

CVE-2008-0665

wmlbackend/p1ipp/ipp.src in Website META Language WML 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file...

CVE-2008-0666

CVE-2008-0666 affects Website META Language (WML) 2.0.11. Local attackers can exploit insecure temporary files created by wml_contrib/wmg.cgi, wml_backend/p3_eperl/eperl_sys.c, and ipp-related paths (e.g., /tmp/pe.tmp.$$) via symlinks to overwrite or modify files. Impact is local. The vulnerabili...

CVE-2008-0665

CVE-2008-0665 affects Website META Language (WML) 2.0.11, where wml_backend/p1_ipp/ipp.src allows local users to overwrite arbitrary files via a symlink attack on ipp.$$.tmp. The issue is confirmed in multiple advisories (Debian DSA-1492-1/2, Gentoo GLSA-200803-23, Mandriva MDVSA-2008:076, Gentoo...

CVE-2008-0666

Website META Language WML 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on 1 the /tmp/pe.tmp.$$ temporary file used by wmlcontrib/wmg.cgi and 2 temporary files used by wmlbackend/p3eperl/eperlsys.c...

CVE-2008-0665

wmlbackend/p1ipp/ipp.src in Website META Language WML 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file...

Debian DSA-1492-1 : wml - insecure temporary files

Frank Lichtenheld and Nico Golde discovered that WML, an off-line HTML generation toolkit, creates insecure temporary files in the eperl and ipp backends and in the wmg.cgi script, which could lead to a local denial of service by overwriting files. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 1492-1] New wml packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1492-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

CVE-2007-5742

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors...

Directory traversal

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors...

CVE-2007-5742

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors...

CVE-2007-5742

CVE-2007-5742 is a directory-traversal vulnerability in the Wesnoth WML engine preprocessor affecting Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12. The issue allows remote attackers to read arbitrary files via directory traversal sequences (".."), as described in the initial advisory. The v...

CVE-2007-5742

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors...

CVE-2007-1441

The 4thPass browser BlackBerry Browser on the RIM BlackBerry 8100 Pearl before 4.2.1 allows remote attackers to cause a denial of service temporary functionality loss via a long href attribute in a link in a WML page...

Input validation

The 4thPass browser BlackBerry Browser on the RIM BlackBerry 8100 Pearl before 4.2.1 allows remote attackers to cause a denial of service temporary functionality loss via a long href attribute in a link in a WML page...

CVE-2007-1441

The 4thPass browser BlackBerry Browser on the RIM BlackBerry 8100 Pearl before 4.2.1 allows remote attackers to cause a denial of service temporary functionality loss via a long href attribute in a link in a WML page...

[Full-disclosure] RIM BlackBerry Pearl 8100 Browser DoS

RIM BlackBerry Pearl 8100 Browser DoS ------ 12 March 2007 Summary: A vulnerability has been discovered that could impact upon the availability of the BlackBerry 8100 Wireless handheld v4.2.0.51. It is possible for a remote attacker to construct a WML page that contains an overly long string valu...

Internet Explorer for Windows Mobile远程WML内容拒绝服务漏洞

Internet Explorer for Windows Mobile是为移动设备所设计的WEB浏览器。 IE for Windows Mobile在处理畸形WML文件时存在漏洞，远程攻击者可能利用此漏洞对移动设备执行拒绝服务攻击。 如果用户使用IE for Windows Mobile浏览了包含有畸形内容的WML页面的话，就会在浏览器中触发溢出，导致拒绝服务，受影响设备的用户必须执行断电重置才能恢复正常操作。 Microsoft Internet Explorer for Windows Mobile 5.0...

CVE-2007-0878

Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service loss of browser and other device functionality via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is related to...

Buffer overflow

Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service loss of browser and other device functionality via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is related to...