EDB-18245
funktionalSplunk - Remote Command Execution
Exploit ansehen Quelle exploit_dbverifiziertTyp remoteAutor Gary O'Leary-Steeleveröffentlicht 2011-12-15Katalog exploit_db
01
ausgenutzte CVEs (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2011-4644US | high9.3 | Exploit | ||
Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, w… | ||||
| CVE-2011-4643US | medium4.0 | Exploit | ||
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2… | ||||
| CVE-2011-4642US | medium4.6 | Exploit | ||
mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators t… | ||||
| CVE-2011-4779US | — | Exploit | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4642. Reason: This candidate is a reservation duplicate of CVE-2011-4642. Notes: All CVE users should ref… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan