Actions
Bug #16901
closed
JP
JP
Daemon configuration manipulation via CR/LF in SNMP settings
Bug #16901:
Daemon configuration manipulation via CR/LF in SNMP settings
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
26.07
Release Notes:
Default
Affected Version:
Affected Architecture:
Description
Multiple fields on services_snmp.php accept CR/LF characters and other characters which are not valid for their content, such as double quotes, which can allow a user to add arbitrary configuration directives.
Affected fields are, at a minimum: syslocation, syscontact, rocommunity, trapstring
This appears to be limited to configuration manipulation as bsnmpd does not have directives which execute external commands.
Files
Actions