Gary Oleary-Steele

The issue allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application. This can be achieved through a cross-site request forgery (CSRF) attack.

The issue allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server.

The issue allows remote attackers to read arbitrary files or execute management commands. This is possible when a Free license is selected, enabling potentially undesirable functionality within an environment that intentionally does not support authentication. Attackers can leverage the ability to create crafted data sources via a management-console session or send an HTTP request to execute management commands.

The issue is a buffer overflow in the HTTP management interface, allowing remote attackers to execute arbitrary code via long headers such as `Host` and `Accept` in HTTP requests. It is noted that the vendor suggests this issue may be in an underlying Microsoft technology, potentially affecting other products as well.

Name of the Vulnerable Software and Affected Versions: RSA SecurID Web Agent versions 5 through 5.3 Description: A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via crafted chunked-encoding data. Recommendations: For RSA SecurID Web Agent versions 5 through 5.3, update to a version that contains a fix for this issue to prevent remote code execution.

The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service (application crash) and possibly the execution of arbitrary code. This can occur through various sniffer filters, including the PSK sniffer filter when handling an IKE packet with a large ID field, the HTTP sniffer filter, and other filters such as POP3, SMTP, IMAP, NNTP, or TDS.