Logstash CVE-2014-4326 Multiple Remote Command Execution Vulnerabilities
BID:68784
Info
Logstash CVE-2014-4326 Multiple Remote Command Execution Vulnerabilities
| Bugtraq ID: | 68784 |
| Class: | Design Error |
| CVE: |
CVE-2014-4326 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 24 2014 12:00AM |
| Updated: | Jun 24 2014 12:00AM |
| Credit: | Jan Karwowski and Danila Borisiuk |
| Vulnerable: |
IBM Logstash 1.4.1 IBM Logstash 1.3.0 IBM Logstash 1.2.0 IBM Logstash 1.1.0 IBM Logstash 1.0.14 |
| Not Vulnerable: |
IBM Logstash 1.4.2 |
Discussion
Logstash CVE-2014-4326 Multiple Remote Command Execution Vulnerabilities
Logstash is prone to multiple remote command-execution vulnerabilities.
Successful exploits will allow remote attackers to execute arbitrary commands within the context of the affected application.
Logstash is prone to multiple remote command-execution vulnerabilities.
Successful exploits will allow remote attackers to execute arbitrary commands within the context of the affected application.
References
Logstash CVE-2014-4326 Multiple Remote Command Execution Vulnerabilities
References:
References:
- CVE-2014-4326 Remote command execution in Logstash zabbix and nagios_nsca output (Jordan Sissel)
- Logstash Homepage (Elasticsearch)