Adobe InDesign Server SOAP interface RunScript command execution

Added: 02/04/2013 BID: 56574 OSVDB: 87548 Background Adobe InDesign is a desktop publishing application. It includes a server interface providing an API for software developers using SOAP. Problem The SOAP interface in Adobe InDesign Server allows remote, unauthenticated attackers to run arbitrar...

Adobe InDesign Server SOAP interface RunScript command execution

Added: 02/04/2013 BID: 56574 OSVDB: 87548 Background Adobe InDesign is a desktop publishing application. It includes a server interface providing an API for software developers using SOAP. Problem The SOAP interface in Adobe InDesign Server allows remote, unauthenticated attackers to run arbitrar...

CVE-2012-3483

CVE-2012-3483 describes a local privilege-escalation race condition in Tunnelblick prior to 3.3beta20, where an attacker can gain high-level privileges by replacing a script file via the vulnerable runScript function. The NVD entry notes a CVSS v2 base score of 6.2 (MEDIUM) with local access and ...

CVE-2012-3483

Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file...

PT-2012-4749

Name of the Vulnerable Software and Affected Versions Tunnelblick versions 3.3beta20 and earlier Description A race condition issue exists in the runScript function, allowing local users to gain privileges by replacing a script file. Recommendations For versions 3.3beta20 and earlier, update to a...

CVE-2012-3483: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file...

CVE-2004-0486: Undefined Security Weakness

HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler...