NetSight
high7.2

CVE-2014-4870

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, whi…

Impact

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.

Affected products

VendorProductAffected versions
BrocadeVyatta 5400 Vrouter Software
Versions 6.4, 6.6, 6.7
BrocadeVyatta 5400 Vrouter
All versions

Weakness classification

References