CVE-2014-5008
snoopy: incomplete fixes for command execution flaws
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), Amazon (hoch).
Beschreibung
Snoopy allows remote attackers to execute arbitrary commands.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | nagios, nagios-common, nagios-debuginfo und 1 weitere | 3.5.1-2.10.amzn1 |
| debian 11 | libphp-snoopy | 2.0.0-1 |
| debian 12 | libphp-snoopy | 2.0.0-1 |
| debian 7 | libphp-snoopy | 2.0.0-1~deb7u1 |
| echo | libphp-snoopy | 2.0.0-1 |
| Red Hat | nagios, nagios-common, nagios-devel | kein Fix angegeben |
Alle 11 Einträge aus 6 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 1 | nagios | 3.5.1-2.10.amzn1 |
| amazon linux 1 | nagios-common | 3.5.1-2.10.amzn1 |
| amazon linux 1 | nagios-debuginfo | 3.5.1-2.10.amzn1 |
| amazon linux 1 | nagios-devel | 3.5.1-2.10.amzn1 |
| debian 11 | libphp-snoopy | 2.0.0-1 |
| debian 12 | libphp-snoopy | 2.0.0-1 |
| debian 7 | libphp-snoopy | 2.0.0-1~deb7u1 |
| echo | libphp-snoopy | 2.0.0-1 |
| Red Hat | nagios | kein Fix angegeben |
| Red Hat | nagios-common | kein Fix angegeben |
| Red Hat | nagios-devel | kein Fix angegeben |
Referenzen
- http://rhn.redhat.com/errata/RHSA-2017-0211.html
- http://rhn.redhat.com/errata/RHSA-2017-0212.html
- http://rhn.redhat.com/errata/RHSA-2017-0213.html
- http://rhn.redhat.com/errata/RHSA-2017-0214.html
- http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.28
- http://www.debian.org/security/2015/dsa-3248
- http://www.openwall.com/lists/oss-security/2014/07/16/10
- http://www.openwall.com/lists/oss-security/2014/07/18/2
Alle 15 Referenzen
- http://www.openwall.com/lists/oss-security/2016/12/21/8
- http://www.securityfocus.com/bid/68419
- https://access.redhat.com/security/cve/CVE-2014-5008
- https://bugzilla.redhat.com/show_bug.cgi?id=1121497
- https://nvd.nist.gov/vuln/detail/CVE-2014-5008
- https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264
- https://www.cve.org/CVERecord?id=CVE-2014-5008