CPE Details
NetApp Ontap Antivirus Connector -
-
2023-01-12
17h37 +00:00
17h37 +00:00
2023-08-11
21h44 +00:00
21h44 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:netapp:ontap_antivirus_connector:-:*:*:*:*:*:*:*
Informations
Vendor
netappProduct
ontap_antivirus_connectorVersion
-Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A use after free vulnerability exists in curl 7.5 High | ||||
| A denial of service vulnerability exists in curl 5.9 Medium | ||||
| An improper certificate validation vulnerability exists in curl 5.9 Medium | ||||
| An information disclosure vulnerability exists in curl 3.7 Low | ||||
| In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). | 9.8 |
Critical |
2025©
tesweb SA
