CVE-2013-7394
Splunk < 5.0.5 - Authenticated Remote Code Execution via runshellscript echo.sh
Title source: llmDescription
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.splunk.com/view/SP-CAAAH76
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-14-053/
Scores
EPSS
0.0082
EPSS Percentile
74.6%
Details
CWE
CWE-94
Status
published
Products (5)
splunk/splunk
5.0
splunk/splunk
5.0.1
splunk/splunk
5.0.2
splunk/splunk
5.0.3
splunk/splunk
< 5.0.4
Published
Aug 07, 2014
Tracked Since
Feb 18, 2026