81 matches found
PT-2020-15623 · Xorux · Stor2Rrd +1
Name of the Vulnerable Software and Affected Versions: XoruX LPAR2RRD and STOR2RRD version 2.70 Description: The issue allows for command injection via shell metacharacters in a timezone, using the tz.pl script with the cmd=set&tz=OS command. This can potentially lead to unauthorized execution of...
CVE-2014-4981
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...
Input validation
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...
CVE-2014-4981
CVE-2014-4981 affects LPAR2RRD prior to 3.5 (and up to 3.5) and related versions where insufficient input sanitization of web GUI parameters allows remote attackers to execute arbitrary commands. The underlying issue is input validation that enables arbitrary command injection on the LPAR2RRD ser...
CVE-2014-4981
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...
CVE-2014-4981: Improper Neutralization of Special Elements used in an OS Command
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...
CVE-2014-4982
LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server...
Command injection
LPAR2RRD = 4.53 and = 3.5 has arbitrary command injection on the application server...
CVE-2014-4982
CVE-2014-4982 concerns a command-injection flaw in LPAR2RRD where insufficient input sanitization on the web GUI parameters allows arbitrary command execution on the application server. Affected versions are reported as ≤ 4.53 and ≤ 3.5. The underlying issue is rooted in input handling on the app...
CVE-2014-4982
LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server...
PT-2020-7692 · Lpar2Rrd · Lpar2Rrd
Name of the Vulnerable Software and Affected Versions: LPAR2RRD versions ≤ 4.53 and ≤ 3.5 Description: The issue concerns arbitrary command injection on the application server. Recommendations: For versions ≤ 4.53 and ≤ 3.5, at the moment, there is no information about a newer version that contai...
CVE-2014-4982: Improper Neutralization of Special Elements used in a Command
LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server...
Xorux Lpar2RRD and Stor2RRD Operating System Command Injection Vulnerability
Bash is a shell command language interpreter written for the GNU Project and running on Unix-like operating systems by American software developer Brian J. Fox. It can read and execute commands from standard input devices or files. An operating system command injection vulnerability exists in Xor...
CVE-2019-19041
An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...
Code injection
An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...
CVE-2019-19041
An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...
CVE-2019-19041
CVE-2019-19041 affects Xorux Lpar2RRD 6.11 and Stor2RRD 2.61 (distributed in Xorux 2.41). The underlying issue is improper verification of upgrade packages, allowing an attacker to modify the files.SUM integrity controls and inject a malicious Bash script via upgrade.sh, enabling arbitrary code e...
CVE-2019-19041: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...
CVE-2019-19041
An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...
