CVE-2014-0007 Command injection in n/a

High 7.5 Published 20 Jun 2014 Updated 6 Aug 2024

Remote attackers can execute arbitrary commands on Foreman Smart-Proxy via shell metacharacters in the TFTP fetch path parameter.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2014-0007?

CVE-2014-0007 is a high-severity command injection vulnerability in Theforeman Foreman, published on 20 Jun 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.

Which versions are affected by CVE-2014-0007?

It affects 1 product.

Linux distribution packages (2)

`ruby193-foreman-proxy` Red Hat:openstack:3::el6	All versions	`0:1.1.10001-7.el6ost`
`foreman-proxy` Red Hat:openstack:4::el6	All versions	`0:1.3.0-5.el6sat`

Products include Theforeman Foreman.

How do I fix CVE-2014-0007?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2014-0007 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2014-0007 exists.

Public exploit code: 1 Exploit-DB entry.

All Theforeman Foreman vulnerabilities

Sources

Also known as GHSA-4ffx-rh24-gpxh, RHSA-2014:0770.