Splunk Multiple Command Injection Vulnerabilities

Bugtraq ID:	62632
Class:	Input Validation Error
CVE:	CVE-2013-6771
Remote:	Yes
Local:	No
Published:	Sep 23 2013 12:00AM
Updated:	Apr 08 2014 12:48AM
Credit:	Gerhard Muntingh and CyberCrown Ltd working with HP's Zero Day Initiative
Vulnerable:	Splunk Splunk 4.3.1 Splunk Splunk 4.2.5 Splunk Splunk 4.1.6 Splunk Splunk 4.1.3 Splunk Splunk 4.1.2 Splunk Splunk 4.1.1 Splunk Splunk 4.0.11 Splunk Splunk 4.0.10 Splunk Splunk 4.0.9 Splunk Splunk 4.0.8 Splunk Splunk 4.0.7 Splunk Splunk 4.0.6 Splunk Splunk 4.0.5 Splunk Splunk 4.0.4 Splunk Splunk 4.0.3 Splunk Splunk 4.0.2 Splunk Splunk 4.0.1 Splunk Splunk 4.0 Splunk Splunk 4.3 Splunk Splunk 4.2.4 Splunk Splunk 4.2.3 Splunk Splunk 4.2.2 Splunk Splunk 4.2 Splunk Splunk 4.1.5 Splunk Splunk 4.1.4 Splunk Splunk 4.1 Splunk Splunk 4
Not Vulnerable:

Splunk Multiple Command Injection Vulnerabilities

Splunk is prone to multiple command-injection vulnerabilities because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to execute arbitrary commands in context of the vulnerable application.

Versions prior to Splunk 5.0.5 are vulnerable.

Splunk Multiple Command Injection Vulnerabilities

Attackers can use readily available tools to exploit these issues.

Splunk Multiple Command Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Splunk Multiple Command Injection Vulnerabilities

References:

• Splunk Homepage (Splunk)