In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter.
원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14119
원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14119
댓글 0
번호 | 제목 | 글쓴이 | 날짜 | 조회 수 |
---|---|---|---|---|
407 | CVE-2017-0114 | 관리자 | 2017.03.18 | 2 |
406 | CVE-2017-0113 | 관리자 | 2017.03.18 | 2 |
405 | CVE-2017-0131 | 관리자 | 2017.03.18 | 2 |
404 | CVE-2017-0129 | 관리자 | 2017.03.18 | 2 |
403 | CVE-2017-0150 | 관리자 | 2017.03.18 | 2 |
402 | CVE-2017-0148 | 관리자 | 2017.03.18 | 2 |
401 | CVE-2017-0145 | 관리자 | 2017.03.18 | 2 |
400 | CVE-2017-0154 | 관리자 | 2017.03.18 | 2 |
399 | CVE-2017-0149 | 관리자 | 2017.03.18 | 2 |
398 | CVE-2014-6189 (security_network_protection_3100_firmware, security_network_protection_4100_firmware, security_network_protection_5100_firmware, security_network_protection_7100_firmware) | 관리자 | 2017.08.27 | 2 |
397 | CVE-2017-12787 | 관리자 | 2017.08.27 | 2 |
396 | CVE-2017-13133 (imagemagick) | 관리자 | 2017.08.27 | 2 |
395 | CVE-2017-13134 (imagemagick) | 관리자 | 2017.08.27 | 2 |
394 | CVE-2017-12858 (libzip) | 관리자 | 2017.08.27 | 2 |
393 | CVE-2017-12965 (apache2triad) | 관리자 | 2017.08.27 | 2 |