CVE-2014-3854

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2014/05/14/3 · Exploit
• openwall.com/lists/oss-security/2014/05/23/1

Lỗ hổng khác của pyplate

• CVE-2014-3855TRUNG BÌNH 5.0Directory traversal vulnerability in download.py in Pyplate 0.08 allows remote attackers to read arbitrary files via a .. (dot dot) in the f…
• CVE-2014-3853TRUNG BÌNH 5.0Pyplate 0.08 does not set the secure flag for the id cookie in an https session, which makes it easier for remote attackers to capture this …
• CVE-2014-3852TRUNG BÌNH 5.0Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obta…
• CVE-2014-3851THẤP 2.1usr/lib/cgi-bin/create_passwd_file.py in Pyplate 0.08 uses world-readable permissions for passwd.db, which allows local users to obtain the …