Sophos Web Protection Appliance - clear_keys.pl Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

[CORE-2013-0809] Sophos Web Protection Appliance Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-0809 Advisory URL:...

CVE-2013-4984

The CVE-2013-4984 issue affects Sophos Web Protection Appliance: the close_connections() function in /opt/cma/bin/clear_keys.pl allows local privilege escalation via shell metacharacters in the second argument, on affected builds before 3.7.9.1 and 3.8 before 3.8.1.1. Root cause is improper escap...

Sophos Web Protection Appliance - Multiple Vulnerabilities

Sophos Web Protection Appliance - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-08...

Sophos Web Protection Appliance - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-0809 Advisory URL:...

Sophos Web Protection Appliance Multiple Vulnerabilities (Jul 2013) - Active Check

Sophos Web Protection Appliance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sophos Web Protection Appliance Command Injection

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-0809 Advisory URL:...

Sophos Web Protection Appliance Command Injection Vulnerability

Core Security Technologies Advisory - Sophos Web Protection Appliance versions 3.7.9 and earlier, 3.8.1, and 3.8.0 suffer from multiple OS command injection vulnerabilities. Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance...

Sophos Web Protection Appliance Multiple Vulnerabilities

Advisory ID Internal CORE-2013-0809 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-0809 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sophos-web-protection-appliance-multiple-vulnerabilities Date published: 2013-09-0...

Design/Logic Flaw

SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host request on TCP port 4984...

CVE-2012-0435

SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host request on TCP port 4984...

CVE-2012-0435

CVE-2012-0435 affects SUSE WebYaST prior to 1.2 0.2.63-0.6.1. A remote attacker can modify the hosts list via a crafted /host request on TCP port 4984, enabling a man-in-the-middle attack against WebYaST. The root cause is the insecure handling of the hosts list, allowing unauthenticated modifica...

SUSE WebYaST remotely accessible hosts list vulnerability

Overview The WebYaST hosts list is remotely accessible by unauthenticated attackers. An attacker may be able to add a malicious host to the list and perform a man-in-the-middle attack against WebYaST. Description The SUSE security advisory states:The hosts list used by WebYaST for connecting to...

MantisBT <=1.2.3 (db_type) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: library/adodb/adodb.inc.php ... 4109: 4110: $file = ADODBDIR."/drivers/adodb-".$db.".inc.php"; 4111: @includeonce$file;...

CVE-2009-4984

CVE-2009-4984 affects Accessories Me PHP Affiliate Script 1.4. The vulnerability is described as multiple cross-site scripting (XSS) in which attackers can inject arbitrary web script or HTML via the Keywords parameter to search.php and the SearchIndex parameter to browse.php. The connected recor...

CVE-2010-4984

creationtimestamp| type| source ---|---|--- 2010-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14325...

CVE-2009-4984

creationtimestamp| type| source ---|---|--- 2009-08-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9370...

CVE-2008-4984

The CVE-2008-4984 issue affects scratchbox2 version 1.99.0.24, where local users can overwrite arbitrary files via a symlink attack on temporary files (e.g., /tmp/dpkg.#####.tmp, /tmp/missing_deps.#####, /tmp/sb2-pkg-chk.$tstamp.#####) related to the dpkg-checkbuilddeps and sb2-check-pkg-mappings...

CVE-2007-4984

CVE-2007-4984 affects the Ktauber.com StylesDemo mod for phpBB 2.0.x. Vulnerable component: index.php; vulnerable via the s parameter causing SQL injection. Root cause: improper handling of input leading to arbitrary SQL execution by remote attackers. Impact, per CVSS: AV:N/AC:L/Au:N/C:P/I:P/A:P ...