OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability
Summary
OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. Local attackers can leverage this issue to execute arbitrary code via the application's insecure Perl module search path. This may allow attackers to elevate their privileges and compromise the application or the underlying computer. Other attacks may also be possible.
Solution
Updates are available. Please see the references for details.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities