Test ID:	1.3.6.1.4.1.25623.1.0.891047
Category:	Debian Local Security Checks
Title:	Debian LTS: Security Advisory for supervisor (DLA-1047-1)
Summary:	vulnerability has been found in supervisor, a system for controlling;process state, where an authenticated client can send a malicious;XML-RPC request to supervisord that will run arbitrary shell commands;on the server. The commands will be run as the same user as supervisord.
Description:	Summary: vulnerability has been found in supervisor, a system for controlling process state, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. Affected Software/OS: supervisor on Debian Linux Solution: For Debian 7 'Wheezy', these problems have been fixed in version 3.0a8-1.1+deb7u2. We recommend that you upgrade your supervisor packages. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11610
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.