66 matches found
Oracle Endeca Information Discovery Integrator ETL Server CopyFile Directory Traversal (CVE-2015-2604)
A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the CopyFile operation. By sending crafted SOAP requests to the target system, a remote authenticate...
Oracle Endeca Information Discovery Integrator ETL Server CopyFile Remote Code Execution Vulnerability
This vulnerability allows remote attackers the ability to execute arbitrary code on vulnerable instances of Oracle Endeca Information Discovery. Authentication is required to exploit this vulnerability but an authentication bypass is known. The specific flaw exists in the handling of the CopyFile...
Mac OS X Multiple Vulnerabilities (Security Update 2014-003)
The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-003 applied. This update contains several security-related fixes for the following components : - copyfile - Dock - Graphics Driver - Intel Graphics Driver - Intel Compute - IOAcceleratorFamily -...
PT-2014-4150
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.4 Description The issue concerns the byte-swapping implementation in the copyfile function, which allows remote attackers to execute arbitrary code or cause a denial of service. This can be achieved by using a...
CVE-2014-1370: Improper Restriction of Operations within the Bounds of a Memory Buffer
The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted AppleDouble file in a ZIP archive...
Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components : - Certificate Trust Policy - copyfile - curl - Dock - Graphics Driver - iBooks Commerce - Intel Graphics Driver - Intel Compute -...