CVE-2014-0007

7.5

HIGHCVSS v2

Published

June 20, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

foreman

NPMNode Implementation of Foreman

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

ddollar/foreman

GitHubManage Procfile-based applications

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

Security Advisories

CVE-2014-0007

Description

More on this CVE