CVE-2017-1000203 Command injection in n/a
Authenticated attackers can execute arbitrary commands on the rootd daemon, leading to remote code execution in the ROOT framework.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-1000203?
CVE-2017-1000203 is a high-severity command injection vulnerability in n/a, published on 17 Nov 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution
Weakness: CWE-78
Which versions are affected by CVE-2017-1000203?
It affects 1 product.
Products include Cern Root.
How do I fix CVE-2017-1000203?
Apply the vendor's patch.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2017-1000203 being exploited?
There is no known exploitation of CVE-2017-1000203 in the wild and no public exploit code.
Sources
Also known as GHSA-fwqx-4844-vqjq, UBUNTU-CVE-2017-1000203, USN-4801-1.