Rocket Servergraph CVE-2014-3914 Multiple Security Vulnerabilities
BID:67779
Info
Rocket Servergraph CVE-2014-3914 Multiple Security Vulnerabilities
| Bugtraq ID: | 67779 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3914 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 02 2014 12:00AM |
| Updated: | Jun 20 2014 12:53AM |
| Credit: | Andrea Micalizzi (rgod) |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Rocket Servergraph CVE-2014-3914 Multiple Security Vulnerabilities
Rocket Servergraph is prone to the following security vulnerabilities:
1. Multiple directory-traversal vulnerabilities
2. Multiple command-injection vulnerabilities
3. A denial-of-service vulnerability
Successfully exploiting these issues may allow an attacker to execute arbitrary commands, compromise the application, or read, write, and delete arbitrary files from the file system.
Rocket Servergraph is prone to the following security vulnerabilities:
1. Multiple directory-traversal vulnerabilities
2. Multiple command-injection vulnerabilities
3. A denial-of-service vulnerability
Successfully exploiting these issues may allow an attacker to execute arbitrary commands, compromise the application, or read, write, and delete arbitrary files from the file system.
Exploit / POC
Rocket Servergraph CVE-2014-3914 Multiple Security Vulnerabilities
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Rocket Servergraph CVE-2014-3914 Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Rocket Servergraph CVE-2014-3914 Multiple Security Vulnerabilities
References:
References: