CVE-2010-3899

概要

参考情報

• security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt
• exploit-db.com/exploits/15476 · Exploit
• osvdb.org/69078
• securityfocus.com/archive/1/514688/100/0/threaded
• securityfocus.com/bid/44740
• vupen.com/english/advisories/2010/2933 · Vendor Advisory

omnifind のその他の脆弱性

• CVE-2010-4236中 6.9Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via…
• CVE-2010-3898中 5.0IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might a…
• CVE-2010-3897中 5.0ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, w…
• CVE-2010-3896高 7.5The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote a…
• CVE-2010-3895高 7.2esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as …