NVD

Id
39393  
Name
CVE-2013-3632  
Description
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-09-29  
Modified Date
2014-09-30  
Seq
2013-3632  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200899 39393 CVE-2013-3632 29323  View
200900 39393 CVE-2013-3632 62873  View
200901 39393 CVE-2013-3632 https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one  View
200902 39393 CVE-2013-3632 https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25073 JVNDB-2013-006650 OpenMediaVault の rpc.php の Cron サービスにおける任意のユーザとして cron ジョブを実行される脆弱性 OpenMediaVault の rpc.php の Cron サービスには、任意のユーザとして cron ジョブを実行される、および任意のコマンドを実行される脆弱性が存在します。 CVE-2013-3632 63574 CVE-2013-3632 39393 9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006650.html 2013-10-30 2014-10-01 View