CVE

Id
74480  
CVE No.
CVE-2014-7180  
Status
Candidate  
Description
Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for (1) eccert.pl and (2) ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files.  
Phase
Assigned (20140925)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
694587 74480 CVE-2014-7180 FULLDISC:20141023 CVE-2014-7180 - ElectricCommander Local Privilege Escalation  View
694588 74480 CVE-2014-7180 URL:http://seclists.org/fulldisclosure/2014/Oct/104  View
694589 74480 CVE-2014-7180 MISC:http://docs.electric-cloud.com/commander_doc/5_0_3/HTML5/ReleaseNotes/commander_releasenotes.htm  View
694590 74480 CVE-2014-7180 MISC:http://packetstormsecurity.com/files/128819/ElectricCommander-4.2.4.71224-Privilege-Escalation.html  View
694591 74480 CVE-2014-7180 MISC:http://www.secureworks.com/advisories/SWRX-2014-010/SWRX-2014-010.pdf  View
694592 74480 CVE-2014-7180 MISC:http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-010/  View
694593 74480 CVE-2014-7180 BID:70722  View
694594 74480 CVE-2014-7180 URL:http://www.securityfocus.com/bid/70722  View
694595 74480 CVE-2014-7180 XF:electriccom-cve20147180-priv-escalation(97735)  View

Related JVN