CVE-2014-3699

CVE-2014-3699 affects the Linux configuration/update tool eDeploy . The vulnerability is a deserialization flaw: untrusted data deserialized via Python’s cPickle , leading to remote code execution. Public references in the documents consistently describe an RCE impact without detailing specific e...

CVE-2014-3701

CVE-2014-3701 describes a tmp file race condition in eDeploy. NVD lists CVSSv3.1 8.1 (Network, High, UI=None, Privileges=None, Scope=Unchanged) with high impact to confidentiality, integrity, and availability; CVSSv2 9.3 (Network, High) also indicates complete impact. Connected entries reiterate ...