Pandora FMS security vulnerabilities

Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Pandora FMS 5.0RC1 and earlier versions, which stems from the anyterm-module endpoint not cleaning up us...

CVE-2014-125124: Improper Neutralization of Special Elements used in an OS Command

An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023. The anyterm-module endpoint accepts unsanitized user input via the p parameter and directly injects it into a shell...

PT-2015-1275

Name of the Vulnerable Software and Affected Versions Infoblox Network Automation NetMRI versions prior to NETMRI-23483 Description The issue is related to a flaw in the authentication procedure of the NetMRI network monitoring program in the Anyterm Daemon. This flaw allows remote attackers to...