CVE-2019-19041

An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...

CVE-2019-19041

CVE-2019-19041 affects Xorux Lpar2RRD 6.11 and Stor2RRD 2.61 (distributed in Xorux 2.41). The underlying issue is improper verification of upgrade packages, allowing an attacker to modify the files.SUM integrity controls and inject a malicious Bash script via upgrade.sh, enabling arbitrary code e...

CVE-2019-19041: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...

PT-2019-15767

Name of the Vulnerable Software and Affected Versions Xorux Lpar2RRD versions 6.11 Stor2RRD versions 2.61 Xorux version 2.41 Description An issue was discovered where the integrity of an upgrade package is not correctly verified before processing. This allows official upgrade packages to be...

CVE-2019-19041

An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...