CVE-2016-1609

概要

参考情報

• seclists.org/bugtraq/2016/Jul/119
• securityfocus.com/bid/92113
• download.novell.com/Download
• download.novell.com/Download
• exploit-db.com/exploits/40161
• novell.com/support/kb/doc.php

filr のその他の脆弱性

• CVE-2016-1611高 7.8Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows loc…
• CVE-2016-1610高 7.5Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2…
• CVE-2016-1608高 8.8vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbi…
• CVE-2016-1607高 7.2Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow…
• CVE-2015-5968中 6.1Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTM…