Searching renaming software vulnerabilities

registrar in the HP resource monitor service al

registrarlog | information | permissions | arbitrary | registrar | resource | creating | original | renaming | readable | symbolic | monitor | appends | service | modify | target | allows | which | users | world | files | local | sets | read | file | link | log |

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.


Crob FTP Server 2.60.1 allows remote authentica

Server | Crob | FTP |

Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.


The SmartScan feature in the Auto-Protect modul

Auto-Protect | AntiVirus | SmartScan | Symantec | feature | Norton | module |

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.


Buffer overflow in the Modweb agent for Novell

overflow | NetMail | Novell | Buffer | Modweb | agent |

Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code.


WinAbility Folder Guard 4.11 allows local users

WinAbility | Folder | Guard |

WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file (FGuard.FGP), which disables the password requirement.


smbd in Samba 3.0.6 through 3.0.23d allows remo

Samba | smbd |

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.


Multiple race conditions in suexec in Apache HT

conditions | Multiple | Apache | Server | suexec | race | HTTP |

Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that the vendor disputes the issue because "the attacks described rely on an insecure server configuration" in which the user "has write access to the document root."


Software vulnerabilities results 1 to 8 of 8     
Page: 1