- Home
- CVEs with nessus.description==The remote IBM Storwize V7000 Unified device is running version 1.3.x
prior to 1.4.3.5 or 1.5.x prior to 1.5.0.4. It is, therefore, affected
by the following vulnerabilities :
- A command injection vulnerability exists in GNU Bash
known as Shellshock. The vulnerability is due to the
processing of trailing strings after function
definitions in the values of environment variables.
This allows a remote attacker to execute arbitrary code
via environment variable manipulation depending on the
configuration of the system. (CVE-2014-6271)
- An out-of-bounds memory access error exists in GNU Bash
in file parse.y due to evaluating untrusted input during
stacked redirects handling. A remote attacker can exploit
this, via a crafted 'here' document, to execute arbitrary
code or cause a denial of service. (CVE-2014-7186)
- An off-by-one error exists in GNU Bash in the
read_token_word() function in file parse.y when handling
deeply-nested flow control constructs. A remote attacker
can exploit this, by using deeply nested loops, to
execute arbitrary code or cause a denial of service.
(CVE-2014-7187)
- A command injection vulnerability exists in GNU Bash
known as Shellshock. The vulnerability is due to the
processing of trailing strings after function
definitions in the values of environment variables.
This allows a remote attacker to execute arbitrary code
via environment variable manipulation depending on the
configuration of the system. (CVE-2014-6278) Note that
this vulnerability exists because of an incomplete fix
for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top