CVE-2017-1000215: OS Command Injection

Q: Which deployments are exposed to remote exploitation?

ROOT xrootd deployments running version 4.6.0 or below are affected. The vulnerability is reachable over the network and requires no authentication or user interaction.

Q: What access does an attacker need to execute commands?

An attacker does not need credentials or prior privileges. The CVSS vector indicates network access is sufficient, with low attack complexity.

Q: What should teams do if they are running an affected release?

Apply the available patch by updating beyond the affected versions. The referenced 4.6.1 release notes and upstream commit identify the available remediation.

Published Nov 17, 2017

Updated

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution

Affected Software

1 affected component

xrootd xrootd<=4.6.0

Remediation

Patch Available

https://github.com/xrootd/xrootd/commit/befa2e627a5a33a38c92db3e57c07d8246a24acf

Event History

Nov 17, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

Which deployments are exposed to remote exploitation?

ROOT xrootd deployments running version 4.6.0 or below are affected. The vulnerability is reachable over the network and requires no authentication or user interaction.

What access does an attacker need to execute commands?

An attacker does not need credentials or prior privileges. The CVSS vector indicates network access is sufficient, with low attack complexity.

What should teams do if they are running an affected release?

Apply the available patch by updating beyond the affected versions. The referenced 4.6.1 release notes and upstream commit identify the available remediation.

CVE-2017-1000215: OS Command Injection

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Which deployments are exposed to remote exploitation?

What access does an attacker need to execute commands?

What should teams do if they are running an affected release?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to remote exploitation?

What access does an attacker need to execute commands?

What should teams do if they are running an affected release?