25 matches found
CVE-2008-4798
The CVE concerns WebGUI prior to version 7.5.30 (stable). The loadModule function in lib/WebGUI/Asset.pm allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL. This enables remote code execution on the affected server. According to the pro...
CVE-1999-1584
CVE-1999-1584 affects SunOS 4.1.1–4.1.3c (and Open Windows 3.0) where two components, loadmodule and modload (when modload runs with setuid/setgid privileges), improperly handle environment variables. This allows local users to gain root privileges. The underlying cause is improper environment sa...
CVE-1999-1586
CVE-1999-1586 describes a local privilege-escalation in SunOS 4.1.x where the loader path loadmodule , used by xnews, does not properly sanitize its environment. The underlying issue is inadequate environment handling, allowing local users to gain privileges. Affected product/component: SunOS 4.1...