68 matches found
ContentKeeper Web Appliance < 125.10 Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
FreeBSD : slim -- insecure PATH assignment (68c7187a-abd2-11df-9be6-0015587e2cc1)
SLiM assigns logged on users a PATH in which the current working directory './' is included. This PATH can allow unintentional code execution through planted binaries and has therefore been fixed SLiM version 1.3.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
sudo: insufficient environment sanitization issue
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable...
ContentKeeper Web Appliance 125.10 - Command Execution (Metasploit)
ContentKeeper Web Appliance 125.10 - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ContentKeeper Web Appliance < 125.10 Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2005-0457
Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGETMPDIR portage temporary directory...
CVE-2005-0457
CVE-2005-0457 affects Opera on Gentoo Linux (versions 7.54 and earlier) due to an insecure plugin path that allows local privilege escalation by placing malicious libraries in the PORTAGE_TMPDIR. Connected sources (Gentoo GLSA 200502-17) reiterate this as a vulnerability in Opera’s handling of pl...
GLSA-200502-17 : Opera: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200502-17 Opera: Multiple vulnerabilities Opera contains several vulnerabilities: fails to properly validate Content-Type and filename. fails to properly validate date: URIs. uses kfmclient exec as the Default Application to handl...