IBM AIX 6.1.8 libodm - Arbitrary File Write

Exploit for aix platform in category local exploits Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation...

CVE-2014-3977 - Privilege Escalation in IBM AIX

Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via arbitrary file writes with elevated privileges...

IBM AIX 6.1.8+ Privilege Escalation

Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via arbitrary file writes with elevated privileges...

IBM AIX 6.1.8 - libodm Arbitrary File Write

IBM AIX 6.1.8 - libodm Arbitrary File Write Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via...

IBM AIX 6.1.8 - 'libodm' Arbitrary File Write

Vulnerability title: Privilege Escalation in IBM AIX CVE: CVE-2014-3977 Vendor: IBM Product: AIX Affected version: 6.1.8 and later Fixed version: N/A Reported by: Tim Brown Details: It has been identified that libodm allows privilege escalation via arbitrary file writes with elevated privileges...

CVE-2014-3977

CVE-2014-3977 affects IBM AIX 6.1, 7.1 and VIOS 2.2.x via libodm.a. Local users can overwrite arbitrary files through a symlink attack on a temporary file, due to an incomplete fix for CVE-2012-2179. This is a local-privilege context vulnerability stemming from the libodm implementation. Impact d...

CVE-2014-3977

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179. Recent assessments: timb-machine at March 05, 2021 12:41am UTC reported:...

AIX 7.1 TL 3 : libodm (IV60303)

AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory libodmadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2013-3977

CVE-2013-3977 affects IBM Sametime Meeting Server (8.x–8.5.2.1 and 9.x–9.0.0.1). The issue lets remote attackers determine which meeting rooms are owned by a user by leveraging valid usernames. A connected Metasploit module (IBM Lotus Notes Sametime Room Name Bruteforce) demonstrates practical ex...

IBM Lotus Notes Sametime Room Name Bruteforce

This module bruteforces Sametime meeting room names via the IBM Lotus Notes Sametime web interface. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'enumerable' class MetasploitModule 'IBM Lotus Notes Sametime...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 6951)

Mozilla Firefox was updated to the 10.0.9ESR security release which fixes bugs and security issues : - Security researchers Thai Duong and Juliano Rizzo reported that SPDY's request header compression leads to information leakage, which can allow the extraction of private data such as session...

CVE-2012-3977

...

CVE-2012-3977

CVE-2012-3977 is rejected/not used; reference CVE-2012-4930 instead.

Gentoo Security Advisory GLSA 201201-07 (NX Server NX Node)

The remote host is missing updates announced in advisory GLSA 201201-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-3977

NoMachine NX Server/Node vulnerable component: nxconfigure.sh in NX Server 3.x (pre-3.5.0-5) and NX Node 3.x (pre-3.5.0-4) contains an unspecified vulnerability that allows local users to read arbitrary files via unknown vectors. Exploitation conditions and impact are described as local privilege...

CVE-2010-3977

CVE-2010-3977 affects the WordPress plugin cforms (version 11.5) via the file wp-content/plugins/cforms/lib_ajax.php . The root cause is improper validation/sanitation of user-supplied input in the rs and rsargs[] parameters, enabling remote attackers to inject arbitrary HTML/JavaScript (XSS) int...

cforms WordPress Plugin Cross Site Scripting Vulnerability - CVE-2010-3977

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ cforms WordPress Plugin Cross Site Scripting Vulnerability CVE-2010-3977...

cforms WordPress Plugin Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ cforms WordPress Plugin Cross Site Scripting Vulnerability CVE-2010-3977 INTRODUCTION According to Delicious Days, "cforms is a powerful and feature rich form plugin for WordPress, offering...

CVE-2010-3977

creationtimestamp| type| source ---|---|--- 2010-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34946...

CVE-2009-3977

CVE-2009-3977 affects the ActiveX control ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53. The vulnerability comprises multiple buffer overflows exploitable via long string arguments to the DisplayName, AddGroup, InstallComponent, or Subscribe methods, potentially leading to memor...