EUVD-2014-3852

Malware in sbrugna...

Command injection

The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a 1 auth, 2 authsession, 3 authsimple, 4 add, 5 addflat, 6 remove, 7 setpwd, 8 addpermissions, 9 revokepermissions, 10 runAsync, or 11 tsmRequest...

CVE-2014-3915: Improper Control of Generation of Code

The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a 1 auth, 2 authsession, 3 authsimple, 4 add, 5 addflat, 6 remove, 7 setpwd, 8 addpermissions, 9 revokepermissions, 10 runAsync, or 11 tsmRequest...

PT-2014-5604

Name of the Vulnerable Software and Affected Versions Rocket Servergraph Admin Center for Tivoli Storage Manager affected versions not specified Description The issue concerns the userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph, which allows remote attacke...

PT-2014-5603

Name of the Vulnerable Software and Affected Versions Rocket ServerGraph version 1.2 Description The issue allows remote attackers to create arbitrary files via a .. dot dot in the query parameter in a writeDataFile action to the fileRequestor servlet, execute arbitrary files via a .. dot dot in...