CVE-2014-3139: snmpd.php bypass authentication

Unitrends
Backup
General

SUMMARY

To fix vulnerability in Unitrends snmpd.php allowing an authentication exploit

CVE ID

CVE-2014-3139

DESCRIPTION

recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string.

RESOLUTION

Resolved in the latest Unitrends security update.

LINK TO ADVISORIES

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3139 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3139 http://www.cvedetails.com/cve/CVE-2014-3139/

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Contact us

Browse this section

File Catalog updates stalled or slow or Image and Host level backups larger when using Windows Defender engine 1.1.18100.5
How to upgrade the appliance via Unitrends' media (Air Gap / Offline updates)
Release Notes for Recovery Series, Recovery Max, and Unitrends Backup 10.5.6
How can I find imaging media for an older release?
How can I find air gap update media for an older release?
Getting Started with Your Free Trial of Unitrends Backup
How can I find an older release of the Unitrends agent software?
9002 - 9012 appliance disk replacement process
Release Notes for Recovery Series, Recovery Max, and Unitrends Backup 10.5.5
Backup Agent Firewall Rules