Searching create software vulnerabilities

(1) acledit and (2) aclput in AIX 4.3 allow loc


(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.


DiskCheck script diskcheck.pl in Red Hat Linux

diskcheckpl | arbitrary | DiskCheck | overwrite | symlink | script | create | attack | allows | files | Linux | local | users | Red | Hat | via |

DiskCheck script diskcheck.pl in Red Hat Linux allows local users to create or overwrite arbitrary files via a symlink attack.


Helix GNOME Updater helix-update 0.5 and earlie

/etc/configd/cshcshrc | /etc/configd/bashrc | /etc/rcconfig | configuration | helix-update | directories | properly | earlier | Updater | system | allows | create | empty | files | users | Helix | GNOME | which | local | does | /tmp | such | not |

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config.


bindsock in Lotus Domino 5.07 on Solaris allows

bindsock | Domino | Lotus |

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.


xfsdq in xfsdump does not create quota informat

information | privileges | securely | xfsdump | allows | create | users | which | local | xfsdq | quota | files | root | gain | does | not |

xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.


sup 1.8 and earlier does not properly create te

temporary | overwrite | arbitrary | properly | earlier | allows | create | local | users | files | which | does | sup | not |

sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.


mindi 0.58 and earlier does not properly create

mindi |

mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.


eupdatedb in esearch 0.6.1 and earlier allows l

eupdatedb | esearch |

eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.


Open WebMail 2.30 and earlier, when use_syshome

WebMail | Open |

Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.


Unspecified vulnerability in Journalness 3.0.7

vulnerability | Journalness | Unspecified |

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors.


vdr before 1.2.6 does not securely create files

before | vdr |

vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.


PostgreSQL 8.0.0 and earlier allows local users

PostgreSQL |

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.


gopher.c in the Gopher client 3.0.5 does not pr

gopherc | client | Gopher |

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.


linki.py in ekg 2005-06-05 and earlier allows l

2005-06-05 | overwrite | temporary | arbitrary | linkipy | earlier | symlink | attack | create | allows | local | users | files | ekg | via |

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.


Race condition in sandbox before 1.2.11 allows

condition | sandbox | before | Race |

Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.


Directory traversal vulnerability in the create

xarMLSXML2PHPBackendphp | vulnerability | directories | attackers | overwrite | parameter | sequences | arbitrary | Directory | traversal | indexphp | function | module | allows | remote | create | Xaraya | files | via |

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php.


Directory traversal vulnerability in TinyPHPFor

vulnerability | TinyPHPForum | demonstrated | Directory | attackers | traversal | account | earlier | profile | create | remote | allows | topic | user | view | via | new |

Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php.


create.php in aoblogger 2.3 allows remote attac

authentication | createphp | attackers | aoblogger | parameter | entries | setting | create | remote | allows | bypass | blog | new | uza |

create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.


Unspecified vulnerability in Lurker 2.0 and ear

vulnerability | Unspecified | directory | attackers | overwrite | writable | earlier | "mbox" | remote | allows | Lurker | create | named | files | any |

Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox".


Buffer overflow in the user_filter_factory_crea

user_filter_factory_create | function | overflow | before | Buffer | PHP |

Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.


Software vulnerabilities results 1 to 20 of 373     
Page: 12345...19►