2989 matches found
ManageEngine ServiceDesk Plus 9.0 Privilege Escalation Vulnerability
ManageEngine ServiceDesk Plus version 9.0 prior to build 9031 suffers from a remote privilege escalation vulnerability due to improper access controls. Title: ManageEngine ServiceDesk Plus User Privileges Management Vulnerability Product: ServiceDesk Plus http://www.manageengine.com/ Affected...
ManageEngine ServiceDesk Plus 9.0 Privilege Escalation
================================================================================ REWTERZ-20140103 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Privileges Management Vulnerability Product:...
CVE-2014-5206: Improper Privilege Management
The doremount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNTLOCKREADONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a "mount -o remount"...
CVE-2014-3534: Improper Privilege Management
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACEPOKEUSRAREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a...
CVE-2014-4943: Improper Privilege Management
The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket...
ManageEngine ServiceDesk Plus 8.0.0 Build 8013 Improper User Privileges
No description provided by source. ================================================================================ Secur-I Research Group Security Advisory SRG-2011-002 ================================================================================ Title : ManageEngine ServiceDesk Plus Improper...
SGI IRIX <= 6.2 cdplayer Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/333/info A vulnerability exists in the /usr/bin/X11/cdplayer application as shipped with SGI's IRIX operating system. By failing to shed root privileges, and creating arbitrary directories as root, cdplayer allows arbitra...
CVE-2014-3476: Improper Privilege Management
OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a 1 trust or 2 OAuth token with impersonation enabled to create a new token with...
CVE-2014-0185: Improper Privilege Management
sapi/fpm/fpm/fpmunix.c in the FastCGI Process Manager FPM in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client...
CVE-2014-1526: Improper Privilege Management
The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped...
CVE-2013-6391: Improper Privilege Management
The ec2tokens API in OpenStack Identity Keystone before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2toke...
PT-2013-5229
Name of the Vulnerable Software and Affected Versions HP Service Manager versions 9.30 through 9.32 Description The issue allows remote authenticated users to obtain sensitive information or modify data due to improper privilege management. Recommendations For HP Service Manager versions 9.30...
PT-2013-2977
Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express affected versions not specified Description The issue concerns improper privilege management for anonymous logins in the scripts editor. This allows remote attackers to read arbitrary scripts by visiting th...
PT-2013-3421
Name of the Vulnerable Software and Affected Versions Moodle versions 2.0 through 2.1.10 Moodle versions 2.2.x through 2.2.7 Moodle versions 2.3.x through 2.3.4 Moodle versions 2.4.x through 2.4.1 Description The issue concerns improper privilege management for WebDAV repositories. This allows...
CVE-2013-0643: Improper Privilege Management
The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted...
CVE-2011-3054: Improper Privilege Management
The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
ManageEngine ServiceDesk Plus 8.0.0 Build 8013 Improper User Privileges
Exploit for php platform in category web applications ================================================================================ Title : ManageEngine ServiceDesk Plus Improper User Privileges Management Vulnerability Product : ServiceDesk Plus http://www.manageengine.com/ Affected Version :...
ManageEngine ServiceDesk Plus 8.0.0 Build 8013 - Improper User Privileges
================================================================================ Secur-I Research Group Security Advisory SRG-2011-002 ================================================================================ Title : ManageEngine ServiceDesk Plus Improper User Privileges Management...
ManageEngine ServiceDesk Plus 8.0 Improper User Privileges
================================================================================ Secur-I Research Group Security Advisory SRG-2011-002 ================================================================================ Title : ManageEngine ServiceDesk Plus Improper User Privileges Management...
CVE-2011-1526: Improper Privilege Management
ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications aka krb5-appl 1.0.1 and earlier does not check the krb5setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP...