CVE-2021-42371

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30...

CVE-2021-42371

CVE-2021-42371 describes a hardcoded system account named lpar2rrd in XoruX LPAR2RRD and STOR2RRD prior to version 7.30. Connected sources confirm the issue is tied to a persistent account credential in these products; exploitation details, affected versions beyond the pre-7.30 gap, and specific ...

CVE-2021-42372

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

CVE-2021-42372

CVE-2021-42372 affects XoruX LPAR2RRD and STOR2RRD prior to version 7.30. The underlying issue is a shell command injection in the HW Events SNMP community, allowing authenticated remote attackers to execute arbitrary shell commands as the service user. Red Hat and other sources confirm the affec...

EUVD-2021-29343

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

PT-2021-23600

Name of the Vulnerable Software and Affected Versions XoruX LPAR2RRD versions prior to 7.30 STOR2RRD versions prior to 7.30 Description A password mismanagement situation exists because cleartext information is present in HTML password input fields in the device properties. Viewing the passwords...

LPAR2RRD 安全漏洞

Xorux LPAR2RRD is a server monitoring tool from the Czech company Xorux. A security vulnerability exists in lpar2rrd, which stems from the fact that lpar2rrd is a hard-coded system account in XoruX lpar2rrd and STOR2RRD before 7.30...

CVE-2021-42371: Insecure Storage of Sensitive Information

lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30...

CVE-2021-42372: Improper Neutralization of Special Elements used in an OS Command

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

PT-2021-23602 · Unknown +1 · Xorux Lpar2Rrd +1

Name of the Vulnerable Software and Affected Versions: XoruX LPAR2RRD and STOR2RRD versions prior to 7.30 Description: A shell command injection in the HW Events SNMP community allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...

CVE-2021-42370: Cleartext Storage of Sensitive Information

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. Viewing the passwords requires configuring a web browser to display HTML password input fields...

CVE-2020-24032

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone...

Command injection

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone...

CVE-2020-24032

CVE-2020-24032 affects XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances via the tz.pl script: it permits command injection through shell metacharacters in the timezone (cmd=set&tz=OS). The Red Hat/PRION/PR security records corroborate the same vulnerability. No exploitation status is provided ...

CVE-2020-24032

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone...

CVE-2020-24032: Improper Neutralization of Special Elements used in an OS Command

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone...

PT-2020-15623 · Xorux · Stor2Rrd +1

Name of the Vulnerable Software and Affected Versions: XoruX LPAR2RRD and STOR2RRD version 2.70 Description: The issue allows for command injection via shell metacharacters in a timezone, using the tz.pl script with the cmd=set&tz=OS command. This can potentially lead to unauthorized execution of...

Xorux Lpar2RRD and Stor2RRD Operating System Command Injection Vulnerability

Bash is a shell command language interpreter written for the GNU Project and running on Unix-like operating systems by American software developer Brian J. Fox. It can read and execute commands from standard input devices or files. An operating system command injection vulnerability exists in Xor...

CVE-2019-19041

An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...

Code injection

An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...