CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 2CVE-2018-19754 – Tarantella Enterprise Security Bypass
https://notcve.org/view.php?id=CVE-2018-19754
Tarantella Enterprise before 3.11 allows bypassing Access Control. Tarantella Enterprise en versiones anteriores a la 3.11 permite la omisión de los controles de acceso. Tarantella Enterprise versions prior to 3.11 suffer from an access control bypass vulnerability. • http://packetstormsecurity.com/files/150542/Tarantella-Enterprise-Security-Bypass.html http://seclists.org/fulldisclosure/2018/Nov/67 • CWE-862: Missing Authorization •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2018-19753 – Tarantella Enterprise Directory Traversal
https://notcve.org/view.php?id=CVE-2018-19753
Tarantella Enterprise before 3.11 allows Directory Traversal. Tarantella Enterprise en versiones anteriores a la 3.11 permite el salto de directorio. Tarantella Enterprise versions prior to 3.11 suffer from a directory traversal vulnerability. • http://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html http://seclists.org/fulldisclosure/2018/Nov/66 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 1.2EPSS: 0%CPEs: 5EXPL: 3CVE-2002-0296 – Tarantella Enterprise 3 - Symbolic Link
https://notcve.org/view.php?id=CVE-2002-0296
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file. La instalación de Tarantela Enterpries 3 permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal "spinning". • https://www.exploit-db.com/exploits/21290 http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html http://marc.info/?l=bugtraq&m=101467193803592&w=2 http://www.securityfocus.com/bid/4115 https://exchange.xforce.ibmcloud.com/vulnerabilities/8223 •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0CVE-2002-0203
https://notcve.org/view.php?id=CVE-2002-0203
ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter. ttawebpot.cgi en Tarantella Enterprise 3.20 en SPARC Solaris y Linux, y 3.1x y 3.0x incluyendo 3.11.903, permite atacantes remotos ver los contenidos del directorio mediante un parámetro pg vacío. • http://marc.info/?l=bugtraq&m=101190195430376&w=2 http://www.tarantella.com/security/bulletin-03.html •