CVE

Id
79092  
CVE No.
CVE-2015-1815  
Status
Candidate  
Description
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.  
Phase
Assigned (20150217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
720540 79092 CVE-2015-1815 EXPLOIT-DB:36564  View
720541 79092 CVE-2015-1815 URL:https://www.exploit-db.com/exploits/36564/  View
720542 79092 CVE-2015-1815 MLIST:[oss-security] 20150326 Fwd: setroubleshoot root exploit (CVE-Request)  View
720543 79092 CVE-2015-1815 URL:http://www.openwall.com/lists/oss-security/2015/03/26/1  View
720544 79092 CVE-2015-1815 MISC:https://github.com/stealth/troubleshooter  View
720545 79092 CVE-2015-1815 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1203352  View
720546 79092 CVE-2015-1815 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1206050  View
720547 79092 CVE-2015-1815 FEDORA:FEDORA-2015-4792  View
720548 79092 CVE-2015-1815 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154147.html  View
720549 79092 CVE-2015-1815 FEDORA:FEDORA-2015-4833  View
720550 79092 CVE-2015-1815 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154427.html  View
720551 79092 CVE-2015-1815 FEDORA:FEDORA-2015-4838  View
720552 79092 CVE-2015-1815 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154444.html  View
720553 79092 CVE-2015-1815 REDHAT:RHSA-2015:0729  View
720554 79092 CVE-2015-1815 URL:http://rhn.redhat.com/errata/RHSA-2015-0729.html  View
720555 79092 CVE-2015-1815 BID:73374  View
720556 79092 CVE-2015-1815 URL:http://www.securityfocus.com/bid/73374  View
720557 79092 CVE-2015-1815 OSVDB:119966  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8726 JVNDB-2015-004046 Pacemaker における権限を取得される脆弱性 Pacemaker は、追加されたノードを適切に評価しないため、権限を取得される脆弱性が存在します。 CVE-2015-1867 79092 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004046.html  View