Lucene search
MitreCVE-2014-9682HistoryFeb 28, 2015 - 1:59 a.m.
CVE-2014-9682
2015-02-2801:59:01
CWE-77
mitre
web.nvd.nist.gov
34
dns
node.js
security
arbitrary command execution
cve-2014-9682
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.003
Percentile
65.2%
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.
Affected configurations
Node
dns-sync_projectdns-syncRange≤0.1.0node.js
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dns-sync_project | dns-sync | * | cpe:2.3:a:dns-sync_project:dns-sync:*:*:*:*:*:node.js:*:* |
Related
prion
prion
Code injection
2015-02-28 01:59:00
cvelist
cvelist
CVE-2014-9682
2015-02-28 01:00:00
nodejs
nodejs
Command Injection
2016-10-27 16:23:56
osv
osv
dns-sync command injection vulnerability
2017-10-24 18:33:36
github
github
dns-sync command injection vulnerability
2017-10-24 18:33:36
nvd
nvd
CVE-2014-9682
2015-02-28 01:59:01
veracode
veracode
Arbitrary Command Execution Through Shell Metacharacters In API Arguments
2015-03-02 16:29:41
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.003
Percentile
65.2%
Related for CVE-2014-9682