EUVD-2011-3168

Malware in sbrugna...

hammerheadsales.com Cross Site Scripting vulnerability OBB-2272539

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2011-3204

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

CVE-2011-3204

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

CVE-2011-3204

The CVE-2011-3204 entry concerns hammerhead.cc in Hammerhead 2.1.4. A local attacker can exploit a symlink vulnerability to write to arbitrary files via two logging paths: the HH_LOG file (/tmp/hammer.log) and the REPORT_LOG file. The underlying issue is a symlink attack that permits unprivileged...

CVE-2011-3204

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

CVE-2011-3204: Improper Link Resolution Before File Access

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

PT-2011-4302

Name of the Vulnerable Software and Affected Versions Hammerhead version 2.1.4 Description The issue allows local users to write to arbitrary files via a symlink attack on the HH LOG file or the REPORT LOG file. Recommendations For version 2.1.4, consider restricting access to the /tmp/hammer.log...