The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2014-06-20T14:00:00
Updated: 2014-06-20T13:57:00
Reserved: 2013-12-03T00:00:00
Link: CVE-2014-0007
JSON object: View
NVD Information
Status : Modified
Published: 2014-06-20T14:55:06.717
Modified: 2023-02-13T00:29:47.573
Link: CVE-2014-0007
JSON object: View
Redhat Information
No data.
CWE