Cisco Unified Communications Manager ELM信息泄漏漏洞

Bugtraq ID:65643 CVE ID:CVE-2014-0733 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 访问某些相关ELM的URL时Cisco Unified Communications Manager应用对其缺少正确的验证，允许远程攻击者利用漏洞获取受限文件敏感内容信息。 0 Cisco Unified Communications Manager 10.01.10000.3 厂商补丁： Cisco ----- Cisco Unified Communications Manager...

CVE-2014-0733

The Enterprise License Manager ELM component in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494...

CVE-2014-0733

The vulnerability CVE-2014-0733 affects Cisco Unified Communications Manager’s Enterprise License Manager (ELM). The ELM component in Unified CM 10.0(1) and earlier does not properly enforce authentication, allowing remote attackers to read ELM files by directly requesting a URL. The issue is an ...

CVE-2013-6688

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager ELM component in Cisco Unified Communications Manager 9.11 and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222...

Directory traversal

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager ELM component in Cisco Unified Communications Manager 9.11 and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222...

CVE-2013-6688

Cisco’s advisory CVE-2013-6688 fixes a directory traversal vulnerability in the Enterprise License Manager (ELM) license-upload interface of Cisco Unified Communications Manager 9.1(1) and earlier. The issue arises from insufficient input validation, allowing an authenticated, remote attacker to ...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

CVE-2013-3472

The CVE concerns Cisco Unified Communications Manager’s Enterprise License Manager (ELM) and a Cross-site Request Forgery (CSRF) flaw that lets an attacker hijack the authentication of arbitrary users to perform ELM-modifying requests. Affected component: ELM within CM; root cause: CSRF vulnerabi...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Slackware: Security Advisory (SSA:2005-311-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: elm

The remote host is missing an update to the system as announced in the referenced advisory. VID f66e011d-13ff-11da-af41-0004614cc33d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: elm

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2003-1324

Race condition in the canopen function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group...

CVE-2003-1323

Elm ME+ 2.4 before PL109S is affected. When installed with setgid mail and on systems lacking POSIX saved ID support, local users can read and modify certain files with the privileges of the mail group via unspecified vectors. The Red Hat advisory corroborates the version and condition but does n...

CVE-2003-1323

Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors...

CVE-2003-1324

The CVE-2003-1324 issue concerns Elm ME+ 2.4, where a race condition in can_open when installed with setgid mail and on systems without POSIX saved ID support lets local users read/modify files with mail-group privileges. Affected component is the can_open function; root cause is a race condition...

FreeBSD : elm -- remote buffer overflow in Expires header (f66e011d-13ff-11da-af41-0004614cc33d)

Ulf Harnhammar has discovered a remotely exploitable buffer overflow in Elm e-mail client when parsing the Expires header of an e-mail message : The attacker only needs to send the victim an e-mail message. When the victim with that message in his or her inbox starts Elm or simply views the inbox...

[slackware-security] elm mailer

New Elm packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A buffer overflow in the parsing of the Expires header could allow arbitrary code to be executed as the user running Elm. Here are the details from the Slackware 10.2 ChangeLog:...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : elm mailer (SSA:2005-311-01)

New Elm packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A buffer overflow in the parsing of the Expires header could allow arbitrary code to be executed as the user running Elm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...