CVE-2014-7180

Electric Cloud ElectricCommander vulnerable versions: 4.2.5 and earlier, and 5.x prior to 5.0.3. The issue is that eccert.pl and ecconfigure.pl have world-writable permissions, enabling local users to modify the files and execute arbitrary Perl code. Impact is local code execution. Remediation: u...