CVE-2014-3008: snmpd.php remote execution

SUMMARY

To fix a Unitrends snmpd.php vulnerability allowing a remote execution exploit

CVE ID

CVE-2014-3008

DESCRIPTION

Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php.

RESOLUTION

Resolved in the latest Unitrends security update

LINK TO ADVISORIES

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3008 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3008