Vulnerability Details CVE-2013-3632
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.568
EPSS Ranking 98.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- http://osvdb.org/99143
- http://www.exploit-db.com/exploits/29323
- http://www.securityfocus.com/bid/62873
- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
- http://osvdb.org/99143
- http://www.exploit-db.com/exploits/29323
- http://www.securityfocus.com/bid/62873
- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
- https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
- https://packetstormsecurity.com/files/179859
Products affected by CVE-2013-3632
-
cpe:2.3:a:openmediavault:openmediavault:-