CVE-2017-1000215 - ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution

CRITICAL

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution

Published Nov 17, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 6.47%

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1488		Advisory
https://github.com/xrootd/xrootd/blob/befa2e627a5a33a38c92db3e57c07d8246a24acf/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.cc#L85		x_refsource_MISCThird Party Advisory
https://github.com/xrootd/xrootd/blob/v4.6.1/docs/ReleaseNotes.txt		x_refsource_CONFIRMRelease NotesThird Party Advisory
https://github.com/xrootd/xrootd/commit/befa2e627a5a33a38c92db3e57c07d8246a24acf		x_refsource_CONFIRMPatchThird Party Advisory
https://security.gentoo.org/glsa/201903-11		vendor-advisoryx_refsource_GENTOOThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 17, 2017

Updated Aug 5, 2024

Reserved Nov 17, 2017

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 17, 2017

Updated Aug 5, 2024

GitHub

No data