CVE-2014-2331

Published: 31 August 2015

Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.

Priority

Status

Package	Release	Status
check-mk Launchpad, Ubuntu, Debian	precise	Ignored (end of life)
	trusty	Does not exist (trusty was not-affected [1.2.2p3-1])
	upstream	Released (1.2.2p3-1)
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Not vulnerable
	yakkety	Not vulnerable
	zesty	Not vulnerable

References

http://packetstormsecurity.com/files/125850/DTC-A-20140324-002.txt
https://www.cve.org/CVERecord?id=CVE-2014-2331
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742689

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›