CVE-2013-6771 | BDVDB-2026-63029 Detail

Description#

Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.splunk.com/view/SP-CAAAH76
http://zerodayinitiative.com/advisories/ZDI-14-052/

Exploit#

No public exploit known

History#

Version 12014-08-07Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.