Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
From: lars@xxxxxxxxxxx
Date: Fri, 13 Feb 2009 14:25:05 -0700
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

We've just released an update to Enomaly ECP (v 2.2.2) that addresses this 
issue. This update removes a fallback feature implemented some time ago which 
was found to have escaped our usual rigorous QA process. Although no users 
experienced any security issues, a potential security vulnerability existed in 
this functionality. This feature will be reintroduced once the security 
concerns have been addressed.

The Enterprise version of Enomaly ECP is not affected by this issue. 

Sourceforge Download: http://sourceforge.net/projects/enomalism/

Prev by Date: [SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities
Next by Date: Re: SEP(Symantec) Bug
Previous by thread: Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
Next by thread: ACM CCS '09: Call for Workshop Proposals
Index(es):
- Date
- Thread