PT-2014-7016

Name of the Vulnerable Software and Affected Versions ZOHO ManageEngine OpManager versions 11.4 and earlier Description A directory traversal issue exists in the FileCollector servlet, allowing remote attackers to write and execute arbitrary files. This is achieved by using a .. dot dot in the...

PT-2014-5458

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue is related to an absolute path traversal vulnerability in the untar block function. This vulnerability allows remote attackers to write to arbitrary files via a drive name in a tar archive...

PT-2014-1952

Name of the Vulnerable Software and Affected Versions Visual Mining NetChart affected versions not specified Description The issue is related to a directory traversal vulnerability in the saveFile.jsp file of the development installation in Visual Mining NetChart. This vulnerability allows remote...

PT-2014-6419

Name of the Vulnerable Software and Affected Versions Check MK versions prior to 1.2.4p4 Check MK version 1.2.5 prior to 1.2.5i4 Description The issue allows remote authenticated users to write check mk config files .mk files to arbitrary locations. This is related to vectors involving row...

PT-2014-4787

Name of the Vulnerable Software and Affected Versions DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions prior to 13.1.10 DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions 13.2.x prior to 13.2.9 Description The issue allows remote authenticated users t...

CVE-2014-0471

Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."...

PT-2014-1776

Name of the Vulnerable Software and Affected Versions dpkg versions 1.15.9 and earlier, 1.16.x before 1.16.13, 1.17.x before 1.17.8 Description The issue allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting." This can lead to a...

CVE-2013-4510

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report...

CVE-2012-1617

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. dot dot in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files...

PT-2012-6314

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2012.1 through 2012.2 Description A directory traversal issue exists when OpenStack Compute Nova is used over libvirt-based hypervisors. This allows remote authenticated users to write arbitrary files to the dis...

PT-2012-1240

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.1.1 Description The issue is related to the ParameterInterceptor component, which does not properly restrict access to public constructors. This allows remote attackers to create or overwrite arbitrary files...

PT-2011-5106

Name of the Vulnerable Software and Affected Versions Serv-U FTP Server versions prior to 11.1.0.5 Description A directory traversal issue allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, by using a "..:/" dot dot colon forward slash ...

PT-2011-1738

Name of the Vulnerable Software and Affected Versions FilterFTP versions 2.0.3 through 2.0.5 FilterFTP versions prior to 2.0.3 Description The issue allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. This is a directory traversal vulnerability...

PT-2010-5325

Name of the Vulnerable Software and Affected Versions CrossFTP Pro versions 1.65a and earlier Description A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." dot dot backslash in a filename. Recommendations For CrossFTP Pro versions 1.65a and earlier...

KLA10154 WLF vulnerability in FTP Voyager

Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename. Original advisories test results Exploitation Related products FTP-Voyager CVE li...

PT-2010-5326

Name of the Vulnerable Software and Affected Versions FTP Voyager versions 15.2.0.11 and earlier Description A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." dot dot backslash in a filename. Recommendations For versions 15.2.0.11 and earlier, upda...

PT-2010-5321

Name of the Vulnerable Software and Affected Versions FreshWebMaster Fresh FTP versions 5.36 through 5.37 FreshWebMaster Fresh FTP versions prior to 5.36 Description A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." dot dot backslash in a filename...

PT-2010-5290

Name of the Vulnerable Software and Affected Versions Robo-FTP versions 3.7.3 through 3.7.4 Description A directory traversal issue exists in the FTP client, allowing remote FTP servers to write arbitrary files by including a .. dot dot in a filename within a server response. Recommendations For...

Mandriva Update for php-pear-Mail MDVSA-2010:025 (php-pear-Mail)

Check for the Version of php-pear-Mail OpenVAS Vulnerability Test Mandriva Update for php-pear-Mail MDVSA-2010:025 php-pear-Mail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2008-1000: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 aka Leopard allows remote authenticated users to write arbitrary files via ".." sequences in file attachments...