Test ID:	1.3.6.1.4.1.25623.1.0.103897
Category:	Web application abuses
Title:	Pandora FMS < 5.0 RCE Vulnerability - Active Check
Summary:	Pandora FMS is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Pandora FMS is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Pandora FMS 4.0.3 / 4.1 / 5.0 RC1 appliances are prone to security vulnerabilities. The Anytermd daemon used for the SSH/Telnet gateway on TCP port 8022/8023 is vulnerable to command injection in the 'p' POST parameter, which allows any unauthenticated attacker to execute arbitrary commands with the rights of the 'pandora' user. Vulnerability Impact: Successful exploits will allow remote attackers to execute arbitrary commands within the context of the 'pandora' user. Affected Software/OS: Pandora FMS version 5.0RC1 and prior. Solution: Update to version 5.0 final. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.