CVE-2014-4869

The Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group...

CVE-2014-4870

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...

Design/Logic Flaw

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...

Command injection

The management console on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command...

Design/Logic Flaw

The Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group...

CVE-2014-4869

The Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group...

CVE-2014-4870

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration...

CVE-2014-4869

CVE-2014-4869 affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The root cause is improper access control where users in the default operator group can access files containing encrypted passwords, enabling exposure of sensitive credentials. The NVD/CERT entries confirm thi...

CVE-2014-4868

The CVE-2014-4868 issue affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The vulnerability is an OS command injection in the management console: remote authenticated users can inject shell metacharacters in a console command to break out of the management shell and execut...

CVE-2014-4868

The management console on the Brocade Vyatta 5400 vRouter 6.4Rx, 6.6Rx, and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command...

CVE-2014-4870

CVE-2014-4870 affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The issue arises from improper input validation in /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl, enabling a non-root user to leverage the sudo configuration to gain root privileges. Connected sources ...

Brocade Vyatta 5400 vRouter contains multiple vulnerabilities

Overview Brocade Vyatta 5400 vRouter versions 6.4Rx, 6.6Rx, and 6.7R1 contain multiple vulnerabilities. Description Brocade Vyatta 5400 vRouter versions 6.4Rx, 6.6Rx, and 6.7R1 contain the following vulnerabilities:CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS...

CVE-2013-7307

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...

Design/Logic Flaw

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...

CVE-2013-7307

The CVE-2013-7307 family concerns OSPF implementations that fail to validate duplicate Link State ID values in LSA packets, leading to possible routing disruption or information disclosure. Connected records confirm concrete products/vendors affected by related CVEs in 2013-0149: Yamaha routers, ...

CVE-2013-7307

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...