CVE

Id
86025  
CVE No.
CVE-2015-8748  
Status
Candidate  
Description
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".  
Phase
Assigned (20160106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756638 86025 CVE-2015-8748 MLIST:[oss-security] 20160105 CVE request for radicale  View
756639 86025 CVE-2015-8748 URL:http://www.openwall.com/lists/oss-security/2016/01/05/7  View
756640 86025 CVE-2015-8748 MLIST:[oss-security] 20160106 Re: CVE request for radicale  View
756641 86025 CVE-2015-8748 URL:http://www.openwall.com/lists/oss-security/2016/01/06/4  View
756642 86025 CVE-2015-8748 CONFIRM:https://github.com/Kozea/Radicale/pull/341  View
756643 86025 CVE-2015-8748 CONFIRM:https://github.com/Unrud/Radicale/commit/4bfe7c9f7991d534c8b9fbe153af9d341f925f98  View
756644 86025 CVE-2015-8748 DEBIAN:DSA-3462  View
756645 86025 CVE-2015-8748 URL:http://www.debian.org/security/2016/dsa-3462  View
756646 86025 CVE-2015-8748 FEDORA:FEDORA-2016-cf9e2429b5  View
756647 86025 CVE-2015-8748 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html  View
756648 86025 CVE-2015-8748 FEDORA:FEDORA-2016-f048c43393  View
756649 86025 CVE-2015-8748 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html  View
756650 86025 CVE-2015-8748 BID:80255  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2303 JVNDB-2016-003076 複数の Symantec 製品における引数インジェクション攻撃を実行される脆弱性 複数の Symantec 製品には、引数インジェクション攻撃を実行される脆弱性が存在します。 CVE-2015-8800 86025 4.9 7.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003076.html  View