CVE-2014-3139

CVE-2014-3139 affects Unitrends Enterprise Backup 7.3.0, where recoveryconsole/bpl/snmpd.php allows remote authentication bypass by sending the auth parameter as a certain string. This is a remote, unauthenticated bypass with potential partial confidentiality, integrity, and availability impact a...

CVE-2014-3139: Improper Authentication

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string...

PT-2014-5113

Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup version 7.3.0 Description The issue allows remote attackers to bypass authentication by setting the auth parameter to a certain string in the recoveryconsole/bpl/snmpd.php file. Recommendations For Unitrends...

CVE-2014-3008

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php...

PT-2014-5017

Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup version 7.3.0 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by using shell metacharacters in the comm parameter to the "/recoveryconsole/bpl/snmpd.php" API...

CVE-2014-3008: Improper Neutralization of Special Elements used in an OS Command

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php...