Lucene search
PRIOn knowledge basePRION:CVE-2014-9645HistoryMar 12, 2017 - 6:59 a.m.
Command injection
2017-03-1206:59:00
PRIOn knowledge base
www.prio-n.com
10
The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an “ifconfig /usbserial up” command or a “mount -t /snd_pcm none /” command.
References
git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b
openwall.com/lists/oss-security/2015/01/24/4
seclists.org/fulldisclosure/2020/Mar/15
www.securityfocus.com/bid/72324
bugs.busybox.net/show_bug.cgi?id=7652
bugzilla.redhat.com/show_bug.cgi?id=1185707
lists.debian.org/debian-lts-announce/2018/07/msg00037.html
plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu
security.gentoo.org/glsa/201503-13
usn.ubuntu.com/3935-1/
Related
securityvulns
securityvulns
[ MDVSA-2015:031 ] busybox
2015-02-11 00:00:00
busybox restrictions bypass
2015-02-11 00:00:00
nessus
nessus
openSUSE Security Update : busybox (openSUSE-2015-433)
2015-06-19 00:00:00
SUSE SLED12 / SLES12 Security Update : busybox (SUSE-SU-2015:1445-1)
2015-09-01 00:00:00
Mandriva Linux Security Advisory : busybox (MDVSA-2015:031)
2015-02-06 00:00:00
debiancve
debiancve
CVE-2014-9645
2017-03-12 06:59:00
cve
cve
CVE-2014-9645
2017-03-12 06:59:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2014-9645
2017-03-12 00:00:00
mageia
mageia
Updated busybox packages fix CVE-2014-9645
2015-01-28 00:08:29
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0041)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1445-1)
2021-04-19 00:00:00
Gentoo Security Advisory GLSA 201503-13
2015-09-29 00:00:00
nvd
nvd
CVE-2014-9645
2017-03-12 06:59:00
cvelist
cvelist
CVE-2014-9645
2017-03-12 06:05:00
veracode
veracode
Authorization Bypass
2020-09-21 06:36:59
gentoo
gentoo
BusyBox: Multiple vulnerabilities
2015-03-29 00:00:00
packetstorm
packetstorm
Phoenix Contact TC Router / TC Cloud Client Command Injection
2020-03-14 00:00:00
osv
osv
busybox - security update
2018-07-27 00:00:00
ubuntu
ubuntu
BusyBox vulnerabilities
2019-04-03 00:00:00
cloudfoundry
cloudfoundry
USN-3935-1: BusyBox vulnerabilities | Cloud Foundry
2019-04-12 00:00:00
debian
debian
[SECURITY] [DLA 2559-1] busybox security update
2021-02-15 11:56:52
[SECURITY] [DLA 1445-1] busybox security update
2018-07-27 04:39:37