There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to
    execute arbitrary commands via shell metacharacters in the UUID field to the server process
    (bcfg2-server). (CVE-2012-3366)

據發現，惡意用戶端可誘騙 Bcfg2 組態管理系統的伺服器元件以 root 權限執行命令。

已发现恶意客户端可诱骗 Bcfg2 配置管理系统的服务器组件以根权限执行命令。

悪意のあるクライアントが、Bcfg2 構成管理システムのサーバーコンポーネントを騙して、ルート権限でコマンドを実行させる可能性があることが判明しました。

It was discovered that malicious clients can trick the server component of the Bcfg2 configuration management system to execute commands with root privileges.

ID	名稱	產品	系列	已發布	已更新	嚴重性
401283	Alpine: bcfg2: security update to 1.2.2-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
401285	Alpine: bcfg2: security update to 1.2.2-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
401283	Alpine: bcfg2: security update to 1.2.2-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
401285	Alpine: bcfg2: security update to 1.2.2-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
59781	Debian DSA-2503-1：bcfg2 - shell 命令插入	Nessus	Debian Local Security Checks	2012/6/29	2021/1/11	high
59781	Debian DSA-2503-1：bcfg2 - shell 命令注入	Nessus	Debian Local Security Checks	2012/6/29	2021/1/11	high
59781	Debian DSA-2503-1：bcfg2 - シェルコマンド注入	Nessus	Debian Local Security Checks	2012/6/29	2021/1/11	high
59781	Debian DSA-2503-1 : bcfg2 - shell command injection	Nessus	Debian Local Security Checks	2012/6/29	2021/1/11	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high