Directory traversal

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...

Design/Logic Flaw

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service daemon crash via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI...

CVE-2009-0880

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...

CVE-2009-0879

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service daemon crash via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI...

CVE-2009-0879

The IBM Director CIM Server (IBM Director versions ≤ 5.20.3 Service Update 2 for Windows) is affected. A design/processing weakness when handling certain crafted requests with an excessively long consumer name can cause the CIM Listener/Server to crash, yielding a DoS of System Director services....

CVE-2009-0880

The CVE-2009-0880 issue affects IBM Director CIM Server CIMListener and allows a remote attacker to load and execute arbitrary local DLL code via a directory traversal in /CIMListener/ M-POST requests, before IBM Director 5.20.3 Service Update 2. Public references and connected advisories indicat...

IBM Director CIM Server multiple security vulnerabilities

DoS, privilege escalation...

SEC Consult SA-20090305-2 :: IBM Director CIM Server Local Privilege Escalation Vulnerability

SEC-CONSULT Security Advisory 20090305-2 ========================================================================================= title: IBM Director CIM Server Local Privilege Escalation Vulnerability program: IBM Director for Windows vulnerable version: = 5.20.3 Service Update 2 homepage:...

KLA10198 Multiple vulnerabilities in IBM Director

Multiple serious vulnerabilities have been found in IBM Director. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Vectors related to CIM server can be exploited remotely via a specially designed...

SEC Consult SA-20090305-1 :: IBM Director CIM Server Remote Denial of Service Vulnerability

SEC-CONSULT Security Advisory 20090305-1 ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable version: = 5.20.3 Service Update 2 homepage:...

IBM Director <= 5.20.3su2 CIM Server Remote DoS Vulnerability

No description provided by source. SEC-CONSULT Security Advisory 20090305-1 ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable version: = 5.20....

PHP Director <= 0.21 (sql into outfile) eval() Injection Exploit

No description provided by source. include stdio.h include stdlib.h include string.h include netinet/in.h include arpa/inet.h include netdb.h / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit-...

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service SEC-CONSULT Security Advisory ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable...

IBM Director <= 5.20.3su2 CIM Server Remote DoS Vulnerability

Exploit for unknown platform in category dos / poc ============================================================= IBM Director ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IB...

IBM System Director Agent 5.20 - CIM Server Privilege Escalation

source: https://www.securityfocus.com/bid/34065/info IBM Director is prone to a privilege-escalation vulnerability that affects the CIM server. Attackers can leverage this issue to execute arbitrary code with elevated privileges in the context of the CIM server process. Versions prior to IBM...

IBM System Director Agent 5.20 - CIM Server Privilege Escalation

IBM System Director Agent 5.20 - CIM Server Privilege Escalation source: https://www.securityfocus.com/bid/34065/info IBM Director is prone to a privilege-escalation vulnerability that affects the CIM server. Attackers can leverage this issue to execute arbitrary code with elevated privileges in...

IBM Director 5.20.3su2 CIM Server - Remote Denial of Service

SEC-CONSULT Security Advisory ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable version: = 5.20.3 Service Update 2 homepage:...

IBM Director Privilege Escalation

SEC-CONSULT Security Advisory ========================================================================================= title: IBM Director CIM Server Local Privilege Escalation Vulnerability program: IBM Director for Windows vulnerable version: = 5.20.3 Service Update 2 homepage:...

PHP Director 0.21 - SQL Into Outfile eval() Injection

PHP Director 0.21 - SQL Into Outfile eval Injection include include include include include include / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit-...

PHP Director 0.21 - SQL Into Outfile 'eval()' Injection

include include include include include include / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit- index.php?cat=%27+UNION+SELECT+1,'lol',3,4,5,6,7,8,9,10,11,12,13,14,15+INTO+OUTFILE+'/var/www/ex.php'/ PHP.ini- Magic Quotes off Written- by...