NVD

Id
34617  
Name
CVE-2014-7180  
Description
Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for (1) eccert.pl and (2) ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-24  
Modified Date
2014-10-27  
Seq
2014-7180  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178320 34617 CVE-2014-7180 http://docs.electric-cloud.com/commander_doc/5_0_3/HTML5/ReleaseNotes/commander_releasenotes.htm  View
178321 34617 CVE-2014-7180 http://packetstormsecurity.com/files/128819/ElectricCommander-4.2.4.71224-Privilege-Escalation.html  View
178322 34617 CVE-2014-7180 20141023 CVE-2014-7180 - ElectricCommander Local Privilege Escalation  View
178323 34617 CVE-2014-7180 http://www.secureworks.com/advisories/SWRX-2014-010/SWRX-2014-010.pdf  View
178324 34617 CVE-2014-7180 http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-010/  View
178325 34617 CVE-2014-7180 70722  View
178326 34617 CVE-2014-7180 electriccom-cve20147180-priv-escalation(97735)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16205 JVNDB-2014-005080 Electric Cloud ElectricCommander における任意の Perl コードを実行される脆弱性 Electric Cloud ElectricCommander は、(1) eccert.pl および (2) ecconfigure.pl に対して、誰でも書き込み可能な権限 (world-writable permission) を使用するため、任意の Perl コードを実行される脆弱性が存在します。 CVE-2014-7180 74472 CVE-2014-7180 34617 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005080.html 2014-10-22 2014-10-29 View