ID de Prueba:	1.3.6.1.4.1.25623.1.0.103897
Categoría:	Web application abuses
Título:	Pandora FMS < 5.0 RCE Vulnerability - Active Check
Resumen:	Pandora FMS is prone to a remote code execution (RCE); vulnerability.
Descripción:	Summary: Pandora FMS is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Pandora FMS 4.0.3 / 4.1 / 5.0 RC1 appliances are prone to security vulnerabilities. The Anytermd daemon used for the SSH/Telnet gateway on TCP port 8022/8023 is vulnerable to command injection in the 'p' POST parameter, which allows any unauthenticated attacker to execute arbitrary commands with the rights of the 'pandora' user. Vulnerability Impact: Successful exploits will allow remote attackers to execute arbitrary commands within the context of the 'pandora' user. Affected Software/OS: Pandora FMS version 5.0RC1 and prior. Solution: Update to version 5.0 final. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.