exploits , vulnerabilities , articles , PHPGroupWare Lang_Extract.PL Temporary File Symbolic Link Vulnerability

Title	PHPGroupWare Lang_Extract.PL Temporary File Symbolic Link Vulnerability
Published	2003-04-30-12:00AM
Updated	2005-01-12-10:43PM
Class	Design Error
CVE	CVE-MAP-NOMATCH
Remote	No
Local	Yes
Credit	Discovery of this vulnerability is credited to Norbert Bollow.
Vulnerable	PHPGroupWare PHPGroupWare 0.9.14 .003 PHPGroupWare PHPGroupWare 0.9.14 .002 PHPGroupWare PHPGroupWare 0.9.14 .001 PHPGroupWare PHPGroupWare 0.9.14 PHPGroupWare PHPGroupWare 0.9.13 Debian Linux 2.2 PHPGroupWare PHPGroupWare 0.9.12 Conectiva Linux 7.0 Conectiva Linux 8.0 Conectiva Linux 9.0 MySQL AB MySQL 3.23.31 MySQL AB MySQL 3.23.34 MySQL AB MySQL 3.23.36 PostgreSQL PostgreSQL 6.3.2 PostgreSQL PostgreSQL 6.5.3
Not Vulnerable	PHPGroupWare PHPGroupWare 0.9.14 .004
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-19 Serv-U File Server User Directory Information Disclosure Vulnerability
• 2009-12-18 ReVou Comment Field HTML Injection Vulnerability
• 2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
• 2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
• 2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
• 2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
• 2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
• 2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
• 2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
• 2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 19 Dec 2009 07:14:03 +0000