CVE-2009-4023

Summary: CVE-2009-4023 (with CVE-2009-4111) affects the Mail::Send implementation in PEAR Mail’s sendmail.php for the Mail package, version 1.1.14. A crafted $from parameter allows remote attackers to read and write arbitrary files over the network. The vulnerability is classified with base CVSS ...

Sun Solaris Telnet Remote Authentication Bypass

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Solaris...

IBM Installation Manager URI Handling Argument Injection Vulnerability - Windows

IBM Installation Manager is prone to an argument injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Installation Manager URI Handling Argument Injection Vulnerability (Windows)

This host has IBM Installation Manager installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: gbibminstallmanagerarginjvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM Installation Manager URI Handling Argument Injection Vulnerability Windows Authors: Antu...

Design/Logic Flaw

Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share...

CVE-2009-3518

CVE-2009-3518 describes an argument injection vulnerability in the IBM Installation Manager (IIM) URI handler (IBMIM.exe) used by IBM Rational Robot and Rational Team Concert. The iim:// URI scheme handler can be manipulated via the -vm option to load an arbitrary DLL, with a demonstration involv...

CVE-2009-3518

Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share...

CVE-2009-3478

FireFTP Extension 1.0 for Firefox is affected by CVE-2009-3478. An argument injection flaw arises from improper filtering/encoding of a double quote in filenames when FireFTP builds the command to psftp.exe, allowing remote authenticated SFTP users to cause victims to alter permissions, delete, d...

KVIrc URI Handler Argument Injection Vulnerability

This host has KVIrc installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkvircarginjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ KVIrc URI Handler Argument Injection Vulnerability Authors: Antu Sanadi Copyright c 2009 SecPod, http://www.secpod.com...

KVIrc URI Handler Argument Injection Vulnerability

KVIrc is prone to an argument injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

The CVE-2008-7070 entry describes an Argument injection vulnerability in the KVIrc 3.4.2 Shiny URI handler that allows remote attackers to execute arbitrary commands by supplying a quote followed by command line switches in URI schemes such as irc:///, irc6:///, ircs:///, or ircs6:///. This align...

Design/Logic Flaw

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI...

Design/Logic Flaw

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...

CVE-2008-6937

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...

Design/Logic Flaw

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935...