CVE-2013-7394: Code Injection

Q: What is the severity of CVE-2013-7394?

CVE-2013-7394 is considered to be of medium severity due to the potential for remote command execution by authenticated users.

Q: How do I fix CVE-2013-7394?

To fix CVE-2013-7394, upgrade to Splunk version 5.0.5 or later.

Q: Who is affected by CVE-2013-7394?

CVE-2013-7394 affects all versions of Splunk prior to 5.0.5, including 5.0, 5.0.1, 5.0.2, 5.0.3, and 5.0.4.

Q: What does CVE-2013-7394 allow an attacker to do?

CVE-2013-7394 allows remote authenticated users to execute arbitrary commands via a crafted string in the 'runshellscript echo.sh' script.

Q: Is CVE-2013-7394 related to any other vulnerabilities?

Yes, CVE-2013-7394 was split from CVE-2013-6771 due to its different vulnerability type.

Published Aug 7, 2014

Updated

The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.

Affected Software

5 affected components

Splunk splunk<=5.0.4

Splunk splunk=5.0

Splunk splunk=5.0.1

Splunk splunk=5.0.2

Splunk splunk=5.0.3

Event History

Aug 7, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-7394?

CVE-2013-7394 is considered to be of medium severity due to the potential for remote command execution by authenticated users.

How do I fix CVE-2013-7394?

To fix CVE-2013-7394, upgrade to Splunk version 5.0.5 or later.

Who is affected by CVE-2013-7394?