CVE-2013-7394 | BDVDB-2026-63030 Detail

Description#

The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.splunk.com/view/SP-CAAAH76
http://zerodayinitiative.com/advisories/ZDI-14-053/

Exploit#

No public exploit known

History#

Version 12014-08-07Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.