GLSA-202003-17 : nfdump: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-17 nfdump: Multiple vulnerabilities Multiple vulnerabilities have been discovered in nfdump. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by sending specially crafted...

nfdump: Multiple vulnerabilities

Background nfdump is a toolset in order to collect and process netflow and sflow data, sent from netflow/sflow compatible devices. Description Multiple vulnerabilities have been discovered in nfdump. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by...

CVE-2020-8947

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

CVE-2020-8947

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

CVE-2012-1258

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters...

CVE-2012-1259

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

Sql injection

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi-bin/scrutfaexclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter...

CVE-2012-1261

CVE-2012-1261 describes a cross-site scripting (XSS) vulnerability in Scrutinizer NetFlow and sFlow Analyzer. The issue affects the CGI endpoint /cgi-bin/scrut_fa_exclusions.cgi, where the standalone parameter can be used to inject arbitrary web script/HTML on affected versions (8.6.2.16204 and o...

CVE-2012-1260

Cross-site scripting XSS vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remote attackers to inject arbitrary web script or HTML via the newUser parameter. NOTE: this might not ...

CVE-2012-1260

The CVE-2012-1260 entry describes multiple vulnerabilities in Plixer Scrutinizer NetFlow & sFlow Analyzer (Scrutinizer) up to version 8.6.2.16204, possibly affecting earlier builds, with remediation implemented in 9.0.1 (9.0.1.19899). Concrete issues include: Cross-site scripting (XSS) in cgi-bin...

CVE-2012-1259

CVE-2012-1259 concerns multiple SQL injection vulnerabilities in Plixer Scrutinizer NetFlow & sFlow Analyzer. Public details identify exploitable vectors in: (1) addip parameter to cgi-bin/scrut_fa_exclusions.cgi, (2) getPermissionsAndPreferences parameter to cgi-bin/login.cgi, and (3) various pa...

CVE-2012-1259

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

CVE-2012-1258

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters...

CVE-2012-1258

The CVE-2012-1258 issue affects Plixer Scrutinizer NetFlow & sFlow Analyzer prior to version 9.0.1.19899, where the web application in cgi-bin/userprefs.cgi does not properly enforce permissions, enabling remote attackers to add administrator accounts via parameters newuser, pwd, and selectedUser...

CVE-2019-20224

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

CVE-2019-20224

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

CVE-2019-20224

CVE-2019-20224 affects Pandora FMS 7.0NG’s netflow path: netflow_get_stats in functions_netflow.php allows remote authenticated users to inject commands via shell metacharacters in ip_src used by index.php?operation/netflow/nf_live_view. The issue arises from remote command execution vulnerabilit...

Fedora Update for nfdump FEDORA-2019-9013b5e75d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for nfdump FEDORA-2019-0fbfb00cbb

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...