security.fatihkilic.de
http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt CVE-2010-3895
IBM OmniFind - Local Privilege Escalation
Record summary
CVE-2010-3895 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.
Description
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIBM OmniFind - Local Privilege EscalationExploitDB exploitby Fatih KilicNot analyzed1 file
References
615475exploit
http://www.exploit-db.com/exploits/15475 20101109 IBM OmniFind - several vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/514688/100/0/threaded 44740vdb entry
http://www.securityfocus.com/bid/44740 ADV-2010-2933vdb entry
http://www.vupen.com/english/advisories/2010/2933 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-3895