CVE-2011-4642

mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as demonstrated by a...

CVE-2011-0754

The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...

CVE-2011-0754

The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...

CVE-2011-0754

The CVE affects PHP’s SPL extension (SplFileInfo::getType) prior to PHP 5.3.4 on Windows, where symbolic links are not detected due to the lack of FILE_ATTRIBUTE_REPARSE_POINT checking. This can enable local symlink attacks via cross-platform stat structure differences. Remediation: upgrade to PH...

CVE-2010-2502

CVE-2010-2502 affects Splunk Web in Splunk 4.0.x (before 4.0.11) and 4.1.x (before 4.1.2). It enables directory traversal to read arbitrary files (SPL-31194); remote authenticated users can modify arbitrary files (SPL-31063); and there is an unknown impact via redirects (SPL-31067). Remediation n...

CVE-2010-2504

CVE-2010-2504 affects Splunk 4.0–4.0.10 and 4.1–4.1.1. The issue is HTTP header injection that allows remote authenticated users to obtain sensitive information (SPL-31066). Root cause details beyond “HTTP header injection” are not provided in the connected documents. Impact is noted as exposure ...

CVE-2010-2503: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 redirects, aka SPL-31067; 2 unspecified "user-user or user-admin" vectors, aka SPL-31084; or 3 unspecified "user input," aka...