Skybox Security Multiple Security Vulnerabilities

Bugtraq ID:	67347
Class:	Access Validation Error
CVE:	CVE-2014-2084
Remote:	Yes
Local:	No
Published:	May 12 2014 12:00AM
Updated:	Aug 01 2014 01:19AM
Credit:	Luigi Vezzoso
Vulnerable:
Not Vulnerable:

Skybox Security Multiple Security Vulnerabilities

Skybox Security is prone to multiple denial-of-service and security-bypass vulnerabilities.

An attacker can exploit these issues to cause the affected device to reboot and/or shutdown, bypass certain security restrictions and perform unauthorized actions.

Skybox Security Multiple Security Vulnerabilities

An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted site.

The following example URIs and an exploit code are available:

https://example.com/scripts/commands/getSystemInformation?_=111111111

https://example.com/scripts/commands/getNetworkConfigurationInfo

https://example.com/scripts/commands/reboot?_=1111111111

https://example.com/scripts/commands/shutdown?_=1111111111

• /data/vulnerabilities/exploits/67347.py

Skybox Security Multiple Security Vulnerabilities

Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.

Skybox Security Multiple Security Vulnerabilities

References: