NVD

Id
26534  
Name
CVE-2015-5349  
Description
The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-04-14  
Seq
2015-5349  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140422 26534 CVE-2015-5349 20160102 [SECURITY] CVE-2015-5349: Apache Directory Studio command injection vulnerability  View
140423 26534 CVE-2015-5349 https://directory.apache.org/studio/news.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11728 JVNDB-2015-007048 Apache LDAP Studio および Apache Directory Studio の CSV エクスポートにおける任意のコマンドを実行される脆弱性 Apache LDAP Studio および Apache Directory Studio の CSV エクスポートは、フィールド値を適切にエスケープしないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2015-5349 82574 CVE-2015-5349 26534 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007048.html 2015-07-01 2016-04-18 View