Enomaly ECP / Enomalism < 2.2.1 Multiple Local Vulnerabilities

Exploit for multiple platform in category local exploits ============================================================== Enomaly ECP / Enomalism 2.2.1 Multiple Local Vulnerabilities ============================================================== Enomaly ECP/Enomalism: Multiple vulnerabilities in...

Enomaly ECP/Enomalism enomalism2.sh Temporary Files

Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in 2.1.1 and 2.2 were found to be...

Enomaly ECP / Enomalism < 2.2.1 - Multiple Local Vulnerabilities

Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in 2.1.1 and 2.2 were found to be...

CVE-2008-4990

CVE-2008-4990 concerns Enomaly ECP/Enomalism (pre-2.2.1) where a local attacker can exploit a symlink race on the temporary PIDFILE (/tmp/enomalism2.pid) to overwrite arbitrary files as root, or inject/alter process termination signals. The linked Seebug entries detail multiple local vulnerabilit...

Enomaly ECP/Enomalism Insecure File Creation

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities 1. Synopsis All versions of Enomaly ECP/Enomalism prior to 2.1.1 use temporary files in an insecure manner, allowing for symlink and command injection attacks. 2. Impact Information Background Enomaly ECP former...

SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 4990)

Cross-site scripting XSS vulnerability in example JSP applications. CVE-2006-7196 - Handling of cookies containing a ' character. CVE-2007-3382 - Handling of ' in cookies. CVE-2007-3385 - tomcat path traversal / information leak. CVE-2007-5641 - directory traversal. CVE-2007-1860 - tomcat https...

HP-UX PHSS_37225 : HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code (HPSBUX02303 SSRT071468 rev.1)

s700800 11.23 X Font Server Patch : A potential security vulnerability has been identified with HP-UX running the X Font Server xfs. The vulnerability could be exploited remotely to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks ...

Fedora 7 : xorg-x11-xfs-1.0.5-1.fc7 (2007-4263)

Bug 373261 - CVE-2007-4568 xfs integer overflow in the buildrange function f7 - Bug 373331 - CVE-2007-4990 xfs heap overflow in the swapchar2b function f7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Mandrake Linux Security Advisory : xfs (MDKSA-2007:210)

Integer overflow in the buildrange function in X.Org X Font Server xfs before 1.0.5 allows context-dependent attackers to execute arbitrary code via 1 QueryXBitmaps and 2 QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow. CVE-2007-4568 The...

Immunity Canvas: XFS_SWAPCHAR2B

Name| xfsswapchar2b ---|--- CVE| CVE-2007-4990 Exploit Pack| CANVAS Description| xfsswapchar2b Notes| CVE Name: CVE-2007-4990 Notes: Repeatability: Infinite References: CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4990 Date public: CVSS: 7.5...

CVE-2007-4990

CVE-2007-4990 affects X.Org X Font Server (xfs) prior to 1.0.5. The vulnerability arises from the swap_char2b routine, where crafted size values in QueryXBitmaps/QueryXExtents heap-allocate data lead to heap corruption and potential arbitrary code execution. Connected advisories (e.g., RHSA/ELSA/...

CVE-2006-4990

CVE-2006-4990 describes PHP remote file inclusion vulnerabilities in PhotoPost 4.0–4.6 where an attacker can execute arbitrary PHP code by supplying a URL to the PP_PATH parameter across multiple PHP scripts (e.g., zipndownload.php and others). The issue enables code execution via network access ...