PT-2014-6055

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.1.4 Description The issue allows remote attackers to read arbitrary XML files by providing a full pathname in the xml parameter in the pkg edit.php file. Recommendations For versions prior to 2.1.4, update to versio...