137 matches found
PT-2013-6139
Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure versions 3.70 and earlier Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation in the admin/confnetworking.html page...
CVE-2013-6830: Improper Control of Generation of Code
admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation...
CVE-2013-4987
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...
Command injection
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...
CVE-2013-4987
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...
CVE-2013-4987
CVE-2013-4987 affects PineApp Mail-SeCure pre-3.70. It is a local privilege-escalation via an access-control failure: a non-privileged user can obtain a root shell by sending a crafted command in the Mail-SeCure console (example: pa_cli system ping /bin/sh). Root access is achieved locally; all v...
PT-2013-5317
Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure versions prior to 3.70 Description The issue allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command. Recommendations For versions prio...
CVE-2013-4987: Undefined Security Weakness
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...
PineApp Mail-SeCure livelog.html Command Injection
Multiple command Injection vulnerabilities exist in PineApp Mail-SeCure...
PineApp Mail-Secure Command Execution
pineapp makes an anti-spam product, which can be downloaded for vmware, etc. the security of the product is a fucking joke, containing everything from authentication bypass to root exploits. there is really no hope, the developers didnt even try. they can patch those specific vulnerabilities, but...
CORE-2013-0904 - PinApp Mail-SeCure Access Control Failure
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ PinApp Mail-SeCure Access Control Failure 1. Advisory Information Title: PinApp Mail-SeCure Access Control Failure Advisory ID: CORE-2013-0904 Advisory URL:...
PinApp Mail-SeCure Access Control Failure
Core Security Technologies Advisory - A security vulnerability was discovered in PineApp Mail-SeCure Suite, allowing a non-privileged attacker to get a root shell by sending a specially crafted command from the Mail-SeCure console. A valid user account is needed to launch the attack, so this is a...
PinApp Mail-SeCure Access Control Failure
Advisory ID Internal CORE-2013-0904 1. Advisory Information Title: PinApp Mail-SeCure Access Control Failure Advisory ID: CORE-2013-0904 Advisory URL:https://www.coresecurity.com/core-labs/advisories/pinapp-mail-secure-access-control-failure Date published: 2013-10-02 Date of last update:...
PinApp Mail-SeCure 3.70 - Access Control Failure
PinApp Mail-SeCure 3.70 - Access Control Failure Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ PinApp Mail-SeCure Access Control Failure 1. Advisory Information Title: PinApp Mail-SeCure Access Control Failure Advisory ID: CORE-2013-0904 Advisory URL:...
PineApp Mail-SeCure privilege escalation
Unfiltered shell characters vulnerability...
PinApp Mail-SeCure 3.70 - Access Control Failure
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ PinApp Mail-SeCure Access Control Failure 1. Advisory Information Title: PinApp Mail-SeCure Access Control Failure Advisory ID: CORE-2013-0904 Advisory URL:...
PineApp Mail-SeCure confpremenu.php Install License Command Injection
A command injection vulnerability has been reported in PineApp Mail-SeCure...
PineApp Mail-SeCure confpremenu.php Export Log Command Injection
A command execution vulnerability has been reported in PineApp Mail-SeCure...
PineApp Mail-SeCure conflivelog.pl Command Injection
A command injection vulnerability exists in PineApp Mail-SeCure. The vulnerability is due to an input validation error in conflivelog.pl of the administration interface. A remote attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable server. Successful...