EMC Documentum TaskSpace远程权限提升漏洞

Bugtraq ID:65990 CVE ID:CVE-2014-0629 EMC Documentum是一款企业文档和图像管理工具，使文档的创建、修改、跟踪和在业务过程中的利用变得高效、规范和严谨。 把dmworld group用户提交到dmsuperusersdynamic组时存在安全漏洞，允许非特权TSP用户获取敏感特权信息。 0 EMC Documentum TaskSpace TSP 6.7SP1 EMC Documentum TaskSpace TSP 6.7SP2 厂商补丁： EMC ----- EMC Documentum TaskSpace 6.7 SP1 P25和6....

CVE-2014-0629

EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 are affected by CVE-2014-0629 due to an incorrect group-addition implementation between the dm_world group and the dm_superusers_dynamic group. This can allow remote authenticated users to obtain sensitive information and gain...

Adobe ColdFusion scheduleedit.cfm Directory Traversal (CVE-2013-0629)

A directory traversal vulnerability has been reported in Adobe ColdFusion...

CVE-2013-0629

creationtimestamp| type| source ---|---|--- 2013-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24946 2016-05-12 09:12:03+00:00| seen| MISP/57344868-a120-4004-90f6-4c49950d210f 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05...

Adobe ColdFusion APSB13-03 Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...

CVE-2013-0629

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013...

CVE-2013-0629

CVE-2013-0629 is an Adobe ColdFusion directory traversal vulnerability affecting ColdFusion 9.0, 9.0.1, 9.0.2, and 10 when a password is not configured. It allows an attacker to access restricted directories via unspecified vectors and was exploited in the wild in January 2013. Connected sources ...

Scientific Linux Security Update : krb5 on SL5.x i386/x86_64

A use-after-free flaw was discovered in the MIT Kerberos administration daemon, kadmind. A remote, authenticated attacker could use this flaw to crash the kadmind daemon. Administrative privileges are not required to trigger this flaw, as any realm user can request information about their own...

Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2012-0629

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0629

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0629

CVE-2012-0629 concerns WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption–related DoS via a crafted website, and is noted as a different vulnerability from other WebKit CVEs in Apple advis...

Gentoo Security Advisory GLSA 201201-13 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 201201-13. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-0629

CVE-2011-0629 documents confirm a cross-site request forgery (CSRF) flaw affecting Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1. The underlying issue enables remote attackers to hijack a user’s authenticated session via unknown vectors. The public materials do not specify the exact attack vectors,...

CVE-2011-0629

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

SuSE 11 Security Update : krb5 (SAT Patch Number 2235)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Fedora 11 : krb5-1.6.3-29.fc11 (2010-6108)

Sol Jerome noticed that the kadmind server daemon could be made to dereference freed memory and crash. This update backports the changeset which contains the fix for this bug CVE-2010-0629. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

RHEL 5 : krb5 (RHSA-2010:0343)

Updated krb5 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0099-1)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-2267. The text description of this plugin is...