Cisco NX-OS Python Scripting Engine Root Access Vulnerability

Cisco NX-OS software is a data center-class operating system that embodies modular design, sustainability, and maintainability. Cisco NX-OS has a security vulnerability that allows a user with locally executable Python scripts to elevate privileges on the Python subsystem and gain root privileges...

Cisco Nexus 7000 Device Local Elevation of Privilege Vulnerability

The Cisco Nexus 7000 Series switches help create the network infrastructure platform needed for next-generation unified array data centers. Multiple elevation of privilege vulnerabilities exist in the Python scripting subsystem on Cisco Nexus 7000 devices configured with multiple VDCs, which can ...

Cisco Nexus 7000 Devices Virtual Device Context Privilege Escalation Vulnerability

A privilege escalation vulnerability in the Python scripting subsystem of Cisco Nexus 7000 devices that have been configured with multiple virtual device contexts VDCs could allow an authenticated, local attacker to delete files owned by a different VDC on the device. The vulnerability exists due...

PeerFTP Server <= 4.01 - Remote Crash PoC

No description provided by source. !/usr/bin/python PeerFTP Server =v4.01 Remote Crash PoC written by localh0t Date: 19/03/12 Contact: [email protected] Follow: @mattdch www.localh0t.com.ar from socket import import sys, struct, os if lensys.argv 3: print \nPeerFTP Server =v4.01 Remote Crash PoC...

Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64

A flaw was found in the way OpenOffice.org enforced a macro security setting for macros, written in the Python scripting language, that were embedded in OpenOffice.org documents. If a user were tricked into opening a specially crafted OpenOffice.org document and previewed the macro directory...

Scientific Linux Security Update : openoffice.org2 on SL4.x i386/x86_64

A flaw was found in the way OpenOffice.org enforced a macro security setting for macros, written in the Python scripting language, that were embedded in OpenOffice.org documents. If a user were tricked into opening a specially crafted OpenOffice.org document and previewed the macro directory...

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

Fedora 12 : openoffice.org-3.1.1-19.32.fc12 (2010-9576)

A security vulnerability in OpenOffice.org, related to python scripting, might lead to unexpected code execution when using the built-in scripting IDE for exploring python code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

openoffice.org security update

CentOS Errata and Security Advisory CESA-2010:0459 Updated openoffice.org packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...

Moderate: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Oracle OpenOffice.org < 3.2.1 Multiple Vulnerabilities

The version of Oracle OpenOffice.org installed on the remote host is prior to 3.2.1. It is, therefore, affected by several issues : - There is a TLS/SSL renegotiation vulnerability in the included third-party OpenSSL library. CVE-2009-3555 - There is a python scripting vulnerability that could le...

Easy RM To MP3 2.7.3.700 Overflow

!/usr/bin/python Exploit for against Easy RM to MP3 2.7.3.700 12.2.2009 Author: Ron Henry - [email protected] - dijital1 Version: Easy RM to MP3 2.7.3.700 Tested against WinXP SP3 - English outputfile = "astley.m3u" shellcode="A" 26071 Offset to EIP - Windows XP SP3 shellcode+="\x25\x96\xa0\x7c"...

32bit FTP (09.04.24) (CWD response) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : 32bit FTP 09.04.24 CWD response Remote Buffer Overflow Exploit Refer : http://www.milw0rm.com/exploits/8611 Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All...

[ MDVSA-2009:063 ] eog

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:063 http://www.mandriva.com/security/ Package : eog Date : March 2, 2009 Affected: 2008.1, 2009.0 Problem Description: Python has a variable called sys.path that contains all paths where Python loads modules...

Mandrake Security Advisory MDVSA-2009:048-2 (epiphany)

The remote host is missing an update to epiphany announced via advisory MDVSA-2009:048-2. OpenVAS Vulnerability Test $Id: mdksa20090482.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:048-2 epiphany Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:046 (dia)

The remote host is missing an update to dia announced via advisory MDVSA-2009:046. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mandrake Security Advisory MDVSA-2009:043 (gnumeric)

The remote host is missing an update to gnumeric announced via advisory MDVSA-2009:043. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

[ MDVSA-2009:047 ] vim

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:047 http://www.mandriva.com/security/ Package : vim Date : February 20, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: Python has a variable called sys.path that contains al...

CVE-2008-5986

Untrusted search path vulnerability in the 1 "VST plugin with Python scripting" and 2 "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory,...

Design/Logic Flaw

Untrusted search path vulnerability in the 1 "VST plugin with Python scripting" and 2 "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory,...