74 matches found
CVE-2014-2591
Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting. Recent assessments: timb-machine at March 05, 2021 12:48am UTC reported: Assessed Attacker Value: 5 Assessed Attacker Value: 5Assess...
CVE-2014-2591
CVE-2014-2591 affects BMC Patrol for AIX 3.9.00 and is caused by an incorrect RPATH setting that enables untrusted search path exploitation. This allows local users to gain privileges by loading a crafted library. The vulnerability is a local privilege escalation risk due to insecure runtime libr...
BMC Patrol For AIX Insecure RPATH Use
Vulnerability title: SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH in BMC Patrol for AIX CVE: CVE-2014-2591 Vendor: BMC Product: Patrol for AIX Affected version: 3.9.00 Fixed version: N/A Reported by: Tim Brown Details: It has been identified that binaries that are executed...
CVE-2012-2591
creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20349...
CVE-2009-2591
SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...
CVE-2009-2591
CVE-2009-2591 concerns SQL injection in the MyAnnonces module for E-Xoopport 3.1. The vulnerability affects the viewannonces action (index.php) where the lid parameter can be manipulated to execute arbitrary SQL commands. This allows remote attackers to interact with the database, with the NVD en...
CVE-2009-2591
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9217...
CVE-2008-2591
CVE-2008-2591 affects Oracle Database Vault (Oracle Database 9.2.0.8DV, 10.2.0.3, 11.1.0.6). The issue is listed in Oracle’s July 2008 CPU and tied to the Database Vault component, with remote authenticated attack vectors and partial impact on confidentiality, integrity, and availability. The CPU...
CVE-2007-2591
The CVE-2007-2591 entry describes a vulnerability in usrmgr/userList.asp within Nokia Intellisync Mobile Suite (versions 6.4.31.2, 6.6.0.107, 6.6.2.2) that could allow a remote attacker to modify user account details and trigger a denial of service (account deactivation) by supplying a manipulate...
CVE-2006-2603
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2591. Reason: This candidate is a duplicate of CVE-2006-2591. Notes: All CVE users should reference CVE-2006-2591 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-2591
CVE-2006-2591 concerns e107 before 0.7.5. The Nessus entry specifies that the remote web server contains a PHP script, email.php, allowing an unauthenticated user to send email messages to arbitrary users and largely control their content, enabling spam or abuse through the affected system. There...
CVE-2004-2591
The CVE-2004-2591 issue affects ButtUglySoftware CleanCache 2.19. The vulnerability arises from the data-overwrite capability not properly overwriting data in files, allowing recovery of previously stored data. According to the records, the impact is partial confidentiality with a local attack ve...
CVE-2005-2591
Parlano MindAlign 5.0 and later versions are reported to be vulnerable to a User Enumeration flaw that allows remote attackers to list valid users via unknown vectors. The description confirms the affected product line but does not provide concrete exploit details, affected components, root cause...
