PT-2014-3588 · Xangati · Xangati Xnr+1

Jan Kadijk · Publicado 2014-04-15 · Atualizado 2014-04-15 · CVE-2014-0359

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xangati XSR versions prior to 11 Xangati XNR versions prior to 7

Description The issue allows remote attackers to execute arbitrary commands. This is achieved by using shell metacharacters in a gui input test.pl params parameter to the "servlet/Installer" endpoint.

Recommendations For Xangati XSR versions prior to 11, update to version 11 or later. For Xangati XNR versions prior to 7, update to version 7 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2014-0359

Produtos afetados

Xangati Xnr

Xangati Xsr

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0359 · Nota de Segurança
• http://kb.cert.org/vuls/id/657622 · Nota