CVE-2014-4870

High

Published: 07/10/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The vyatta-clear-dhcp-lease.pl script on Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, allowing local users to gain elevated privileges by leveraging the sudo configuration.

Risk Assessment

Local users may gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update to the latest software version and review the sudo configuration to mitigate potential risks.

Other vulnerabilities in Brocade Vyatta 5400 vRouter

CVE-2014-4868High
The management console on the Brocade Vyatta 5400 in versions 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters in a console command.

Original NVD description (English source)

/opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging the sudo configuration.