Bugtraq mailing list archives
Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
From: lars () enomaly com
Date: Fri, 13 Feb 2009 14:25:05 -0700
We've just released an update to Enomaly ECP (v 2.2.2) that addresses this issue. This update removes a fallback feature implemented some time ago which was found to have escaped our usual rigorous QA process. Although no users experienced any security issues, a potential security vulnerability existed in this functionality. This feature will be reintroduced once the security concerns have been addressed. The Enterprise version of Enomaly ECP is not affected by this issue. Sourceforge Download: http://sourceforge.net/projects/enomalism/
Current thread:
- Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability sc0ttbeardsley (Feb 13)
- <Possible follow-ups>
- Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability lars (Feb 16)