Lucene search
+L

249 matches found

NVD
NVD
•added 2014/11/24 3:59 p.m.•25 views

CVE-2014-7817

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

4.6CVSS9.1AI score0.00578EPSS
SaveExploits0References17
OSV
OSV
•added 2014/11/24 3:59 p.m.•6 views

DEBIAN-CVE-2014-7817

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

4.6CVSS7.5AI score0.00578EPSS
SaveExploits0References1
Mend
Mend
•added 2014/11/24 3:00 p.m.•0 views

CVE-2014-7817

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$"...""...

5.9CVSS0.00578EPSS
SaveExploits0References19
Cvelist
Cvelist
•added 2014/11/24 3:00 p.m.•39 views

CVE-2014-7817

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

9.6AI score0.00578EPSS
SaveExploits0References17
CVE
CVE
•added 2014/11/24 3:00 p.m.•176 views

CVE-2014-7817

CVE-2014-7817 affects the GLIBC wordexp function (glibc) where WRDE_NOCMD was not enforced, allowing context-dependent local attackers to execute arbitrary commands via input containing shell substitutions (e.g., $(...)). Public disclosures and vendor advisories (Debian/DSA-3142-1; CentOS CESA no...

4.6CVSS8.6AI score0.00578EPSS
SaveExploits0References17Affected Software1
OSV
OSV
•added 2014/11/24 12:00 a.m.•14 views

UBUNTU-CVE-2014-7817

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

4.6CVSS7.4AI score0.00578EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/24 12:00 a.m.•5 views

CVE-2014-7817: Improper Input Validation

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

4.6CVSS8.4AI score0.00578EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2014/11/24 12:00 a.m.•35 views

CVE-2014-7817

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

4.6CVSS7.1AI score0.00578EPSS
SaveExploits0References3
myhack58
myhack58
•added 2009/05/18 12:00 a.m.•23 views

DOC 0day-vulnerability warning-the black bar safety net

Author: wordexp This doc to use a certain difficulty: the poc are as follows: \rtf1\ansi\ansicpg409\deff0\deflang1033 \fonttbl\f0\fmodern\fprq6\fcharset0 DOTUM; \stylesheet\stylesheet\stylesheet\stylesheet\.........\ stylesheet................. hi.baidu.com/wordexp\par Error command: :u 30cffca0 ...

1.1AI score
SaveExploits0
Rows per page
Query Builder