115 matches found
CVE-2013-4011
creationtimestamp| type| source ---|---|--- 2013-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28507 2014-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32700 2018-05-29 15:50:33+00:00| seen|...
IBM AIX 6.17.1 - Local Privilege Escalation
IBM AIX 6.17.1 - Local Privilege Escalation Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link:...
IBM AIX 6.1/7.1 - Local Privilege Escalation
Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...
AIX 7.1 TL 0 : infiniband (IV43562)
Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory infinibandadvisory.asc...
AIX 7.1 TL 1 : infiniband (IV43756)
Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory infinibandadvisory.asc...
CVE-2013-4011
CVE-2013-4011 affects IBM AIX 6.1/7.1 (and VIOS 2.2.2.2-FP-26 SP-02) InfiniBand subsystem components, enabling local privilege escalation via vulnerable paths in ibstat and arp.ib. Public references describe local-root escalation through a trusted SUID ibstat-based workflow and list related explo...
Security Vulnerabilities in AIX InfiniBand,Security Vulnerabilities in VIOS InfiniBand
IBM SECURITY ADVISORY First Issued: Tue Jul 16 10:46:04 CDT 2013 The most recent version of this document is available here: | Updated: Mon Oct 14 20:02:42 CDT 2013 | Update: Includes VIOS in Vulnerability Summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purpose...
CVE-2012-4011
CVE-2012-4011 affects Cybozu KUNAI for Android (pre-2.0.6). The vulnerability allows a remote attacker to execute arbitrary Java methods, potentially exposing device data and enabling arbitrary OS commands when a user visits a specially crafted website. Public sources identify the affected versio...
Oracle WebLogic Admin State Unspecified Privilege Escalation (CVE-2008-4011)
According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege escalation vulnerability such that some applications in admin state are made available to non-admin users. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2010-4011
Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issu...
CVE-2010-4011
CVE-2010-4011 affects Dovecot on Apple Mac OS X 10.6.5 (10H574; server variants noted in Nessus). The root cause is a memory handling issue (described as a memory aliasing issue) in Dovecot’s processing of user names, which allows remote authenticated users to read another person’s private email ...
CVE-2008-4011
CVE-2008-4011 applies to BEA/Oracle WebLogic Server in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via unknown vectors. The associated NVD entry lists a network-accessible, high-complexit...
CVE-2006-4011
Kayako eSupport vulnerable to PHP remote file inclusion (CVE-2006-4011) in esupport/admin/autoclose.php for 2.3.1 and earlier when register_globals is enabled. An attacker can specify a URL in the subd parameter to execute arbitrary PHP code. Affected product/version: Kayako eSupport 2.3.1 and ea...
CVE-2005-4011
The CVE-2005-4011 vulnerability affects Codewalkers ltwCalendar (aka PHP Event Calendar) and involves a SQL injection in calendar.php via the id parameter. Affected versions are 4.2, 4.1.3 and earlier. The underlying issue is improper input handling that allows remote attackers to execute arbitra...
