Evgeny Legerov has discovered a vulnerability in Zmanda Recovery Manager for MySQL, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an input validation error in socket-server.pl before using parameters in a call to "system()". This can be exploited to inject and execute shell commands by sending a specially crafted packet to port 25300/TCP.

The vulnerability is confirmed in version 2.0 (Community Edition). Other version may also be affected.

Solution
Update to version 2.1.1.

Provided and/or discovered by
Evgeny Legerov

Changelog
Further details available in Customer Area

Original Advisory
http://www.intevydis.com/blog/?p=51

Deep Links
Links available in Customer Area