881 matches found
Design/Logic Flaw
Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain...
CVE-2007-5023
CVE-2007-5023 describes an unquoted Windows search path vulnerability that could allow local users to gain privileges in EMC VMware products. Affected are VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, VMware Player before 1.0.5 Build 56455 and Player 2 before 2.0.1...
[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1287-1 [email protected] http://www.debian.org/security/ Noah Meyerhans May 07, 2007 - ------------------------------------------------------------------------ Package : ldap-account-manager...
Persism CMS 0.9.2 - system[path] Remote File Inclusion
Persism Content Management System = 0.9.2 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.persism.com/emil/0.9.2/0.9.2.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/modules/blocks/headerfile.php?systempath=Shell...
Web Slider 0.6 (path) Remote File Inclusion Vulnerabilities
No description provided by source. Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell...
CVE-2007-2027
CVE-2007-2027 affects Elinks 0.11.1 (ELinks) via the function add_filename_to_string in intl/gettext/loadmsgcat.c, allowing a local attacker to cause Elinks to load an untrusted gettext catalog (.po) from a ../po directory and potentially perform format-string attacks. Multiple connected sources ...
CVE-2006-7191
The CVE-2006-7191 vulnerability affects LDAP Account Manager (LAM) via lamdaemon.pl, where an untrusted PATH can let local users execute a malicious rm and gain privileges. Public advisories (DSA-1287-1 for Debian) confirm the issue and provide remediation by upgrading ldap-account-manager to a f...
IP3 NetAccess < 4.1.9.6 Remote Arbitrary File Disclosure Vulnerability
Exploit for hardware platform in category remote exploits ====================================================================== IP3 NetAccess 4.1.9.6 Remote Arbitrary File Disclosure Vulnerability ====================================================================== I - TITLE Security advisory:...
phpXD 0.3 - path Remote File Inclusion
phpXD 0.3 - path Remote File Inclusion | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:phpxd Affected Version:0.3...
CVE-2007-0022
CVE-2007-0022: Mac OS X 10.4.8 writeconfig untrusted search path allows local privilege escalation by manipulating PATH to point to a malicious launchctl. The vulnerability stems from an untrusted search path in writeconfig, enabling a local user to gain privileges. Public details in the connecte...
CVE-2002-2221
The CVE-2002-2221 entry describes an untrusted search path vulnerability in chetcpasswd (Pedro Lineu Orso) versions 2.4.1 and earlier. The underlying issue is a modified PATH that can reference a malicious cp binary, enabling local users to gain privileges. Documented impact is local privilege es...
Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)
Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution 926121 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...
动网(DVBBS)存在泄露绝对路径漏洞
问题出在DvClsMain.asp的44行： CacheName = LcaseReplaceReplaceReplaceServer.MapPath"index.asp","index.asp","",":","","\\\\","" 和46行: Forumsn = ReplaceCacheName,"","" 这里把web绝对路径放进Forumsn，在以cookie的形式返回给客户，导致web绝对路径泄漏。 DVBBS 7.1.0 更新最新补丁。...
CVE-2006-4994
Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute 1 FileZillaServer.exe, 2 mysqld-nt.exe, 3 Perl.exe, or 4 xamppcontrol.exe with ...
MyBB Full path and Cross site scripting vulnerabilities
Hello Title : MyBB Full path and Cross site scripting vulnerabilities Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] xss archive/index.php/forum-4.html?GLOBALS=1&navbitsname=33&navbitsname=scriptalertdocument.cookie;/script full path...
CVE-2006-4416
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious 1 chdev, 2 mkboot, 3 varyonvg, or 4 varyoffvg program...
CVE-2006-4416
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious 1 chdev, 2 mkboot, 3 varyonvg, or 4 varyoffvg program...
CVE-2006-3443
CVE-2006-3443 affects Windows 2000 SP4 with Winlogon vulnerable to a User Profile Elevation of Privilege when SafeDllSearchMode is disabled. A local attacker can place a malicious DLL in the UserProfile directory to execute code with SYSTEM-level privileges after logon, as described in Microsoft ...
CVE-2006-3500
The dynamic linker dyld in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability...
Design/Logic Flaw
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program...