Centreon 'file_put_contents()' Function Remote Command Execution Vulnerability

Bugtraq ID:	71333
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 27 2014 12:00AM
Updated:	Nov 27 2014 12:00AM
Credit:	Damien Cauquil
Vulnerable:	Centreon Centreon 2.3.2 Centreon Centreon 2.3.1 Centreon Centreon 2.1.5 Centreon Centreon 2.1.4 Centreon Centreon 2.1.3 Centreon Centreon 2.1.2 Centreon Centreon 2.1.1 Centreon Centreon 2.0.2 Centreon Centreon 2.0.1 Centreon Centreon 1.4.2 .4 Centreon Centreon 1.4.1 Centreon Centreon 2.0.RC5 Centreon Centreon 2.0.RC4 Centreon Centreon 2.0.RC3 Centreon Centreon 2.0.RC2 Centreon Centreon 2.0.RC1 Centreon Centreon 2.0 Centreon Centreon 1.4.2.3 Centreon Centreon 1.4.2.2 Centreon Centreon 1.4
Not Vulnerable:

Centreon 'file_put_contents()' Function Remote Command Execution Vulnerability

Centreon is prone to a remote command-execution vulnerability.

Attackers can exploit this issue to execute arbitrary commands in the context of the application.

Centreon 2.5.3 and prior are vulnerable.

Centreon 'file_put_contents()' Function Remote Command Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Centreon 'file_put_contents()' Function Remote Command Execution Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Centreon 'file_put_contents()' Function Remote Command Execution Vulnerability

References:

• centreon Homepage (centreon)