Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.808507
Category:General
Title:Elastic Logstash 'CVE-2014-4326' RCE Vulnerability - Linux
Summary:Elastic Logstash is prone to a remote code execution (RCE); vulnerability.;; This VT has been deprecated and merged into the VT 'Elastic Logstash 'CVE-2014-4326' Remote Code Execution Vulnerability' (OID: 1.3.6.1.4.1.25623.1.0.808095)
Description:Summary:
Elastic Logstash is prone to a remote code execution (RCE)
vulnerability.

This VT has been deprecated and merged into the VT 'Elastic Logstash 'CVE-2014-4326' Remote Code Execution Vulnerability' (OID: 1.3.6.1.4.1.25623.1.0.808095)

Vulnerability Insight:
The Flaw is due improper validation of
inputs passed to 'zabbix.rb' and 'nagios_nsca.rb' outputs.

Vulnerability Impact:
Successful exploitation will allow
remote attackers to execute arbitrary commands.

Affected Software/OS:
Elastic Logstash version prior to
1.4.2.

Solution:
Update to Elastic Logstash version
1.4.2 or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2014-4326
Bugtraq: 20140718 CVE-2014-4326 Remote command execution in Logstash zabbix and nagios_nsca outputs. (Google Search)
http://www.securityfocus.com/archive/1/532841/100/0/threaded
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.