Secunia

forloop has reported a vulnerability in BlueCat Networks Adonis, which can be exploited by malicious, local users to gain elevated privileges.

The vulnerability is caused due to the improper checking of arguments passed to the "set host-name" command from the Command Line Interface (CLI) (reportedly more commands are affected). This can be exploited to execute arbitrary commands with the privileges of the root user.

NOTE: The CLI is accessible only by users with administrator login capabilities.

The vulnerability is reported in version 5.0.2.8. Other versions may also be affected.

Solution
Update to version 5.0.5.

Provided and/or discovered by
Discovered by forloop of Template Security.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area