CVE-2014-5502

Summary

The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete, or (4) ccc_flush_sql_file opcode.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.zerodayinitiative.com/advisories/ZDI-14-328/
• http://www.zerodayinitiative.com/advisories/ZDI-14-333/
• http://www.zerodayinitiative.com/advisories/ZDI-14-331/
• http://www.zerodayinitiative.com/advisories/ZDI-14-332/
• http://kb.cyberoam.com/default.asp?id=3049

References

• http://www.zerodayinitiative.com/advisories/ZDI-14-328/
• http://www.zerodayinitiative.com/advisories/ZDI-14-333/
• http://www.zerodayinitiative.com/advisories/ZDI-14-331/
• http://www.zerodayinitiative.com/advisories/ZDI-14-332/
• http://kb.cyberoam.com/default.asp?id=3049

• ←Previous
• Next→