Unscored CVE-2015-5699 EUVD-2015-5646GHSA-vvmc-rjw5-5q66

The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands v…

Published Oct 20, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label.

References

20150811 CVE-2015-5699 - Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalation mailing-list