NitroView ESM 'ess.pm' Remote Command Execution Vulnerability
BID:44421
Info
NitroView ESM 'ess.pm' Remote Command Execution Vulnerability
| Bugtraq ID: | 44421 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-4099 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | s_n |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
NitroView ESM 'ess.pm' Remote Command Execution Vulnerability
NitroView ESM is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied input.
Successful attacks may allow an attacker to execute arbitrary commands on the appliance in the context of the webserver process.
NitroView ESM 8.4.0a is affected; other versions may also be vulnerable.
NitroView ESM is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied input.
Successful attacks may allow an attacker to execute arbitrary commands on the appliance in the context of the webserver process.
NitroView ESM 8.4.0a is affected; other versions may also be vulnerable.
Solution / Fix
NitroView ESM 'ess.pm' Remote Command Execution Vulnerability
Solution:
Reportedly the vendor has released a patch to address the issue, however Symantec has not confirmed it. Please contact the vendor for more information.
Solution:
Reportedly the vendor has released a patch to address the issue, however Symantec has not confirmed it. Please contact the vendor for more information.