CVE-2017-5496

概要

参考情報

• hyp3rlinx.altervista.org/advisories/SAWMILL-PASS-THE-HASH-AUTHENTICATION-BYPASS.txt · Third Party Advisory
• packetstormsecurity.com/files/141177/Sawmill-Enterprise-8.7.9-Authentication-Bypass.html · Third Party Advisory
• seclists.org/fulldisclosure/2017/Feb/46 · Third Party Advisory
• exploit-db.com/exploits/41395

sawmill のその他の脆弱性

• CVE-2013-4947高 7.5Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and a…
• CVE-2010-1079中 4.3Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspeci…
• CVE-2005-2950中 4.3Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via …
• CVE-2005-1901中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML vi…
• CVE-2005-1900高 7.5Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license.