First published: Tue Dec 31 2013(Updated: )
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
op5 Monitor | <=5.5.1 | |
op5 Monitor | =5.3.5 | |
op5 Monitor | =5.4.0 | |
op5 Monitor | =5.4.2 | |
op5 Monitor | =5.5.0 | |
Op5 System | <=1.6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0261 is classified as a critical vulnerability due to its potential for remote code execution.
To fix CVE-2012-0261, upgrade op5 Monitor to version 5.5.2 or later and op5 System-portal to version 1.6.2 or later.
CVE-2012-0261 allows remote attackers to execute arbitrary commands, potentially compromising the entire system.
Versions of op5 Monitor prior to 5.5.2, including 5.3.5, 5.4.0, 5.4.2, and 5.5.0, are affected by CVE-2012-0261.
op5 System-portal versions up to and including 1.6.1 are affected by CVE-2012-0261.