CVE-2007-4390 - Vulnerability Details - OpenCVE

The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Bluecat Networks	Adonis

Configuration 1 [-]

cpe:2.3:h:bluecat_networks:adonis:5.0.2.8:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.spirityenterprise.com/virtual-ciso
http://osvdb.org/39398
http://secunia.com/advisories/26495
http://securityreason.com/securityalert/3025
http://www.securityfocus.com/archive/1/476785/100/0/threaded
http://www.securityfocus.com/archive/1/477163/100/0/threaded
http://www.securityfocus.com/bid/25342
http://www.securitytracker.com/id?1018584
https://exchange.xforce.ibmcloud.com/vulnerabilities/36082

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-08-17T22:00:00.000Z

Updated: 2024-08-07T14:53:55.857Z

Reserved: 2007-08-17T00:00:00.000Z

Link: CVE-2007-4390

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-08-17T22:17:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-4390

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-08-16T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "26495", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26495"}, {"name": "25342", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25342"}, {"name": "adonis-dnsdhcpcli-privilege-escalation(36082)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36082"}, {"name": "1018584", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018584"}, {"name": "3025", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3025"}, {"name": "20070816 TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/476785/100/0/threaded"}, {"name": "39398", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39398"}, {"name": "20070820 Re: TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/477163/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4390", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "26495", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26495"}, {"name": "25342", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25342"}, {"name": "adonis-dnsdhcpcli-privilege-escalation(36082)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36082"}, {"name": "1018584", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018584"}, {"name": "3025", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3025"}, {"name": "20070816 TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/476785/100/0/threaded"}, {"name": "39398", "refsource": "OSVDB", "url": "http://osvdb.org/39398"}, {"name": "20070820 Re: TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/477163/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:53:55.857Z"}, "title": "CVE Program Container", "references": [{"name": "26495", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26495"}, {"name": "25342", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/25342"}, {"name": "adonis-dnsdhcpcli-privilege-escalation(36082)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36082"}, {"name": "1018584", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1018584"}, {"name": "3025", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3025"}, {"name": "20070816 TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/476785/100/0/threaded"}, {"name": "39398", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39398"}, {"name": "20070820 Re: TS-2007-003-0: BlueCat Networks Adonis CLI root privilege escalation", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/477163/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4390", "datePublished": "2007-08-17T22:00:00.000Z", "dateReserved": "2007-08-17T00:00:00.000Z", "dateUpdated": "2024-08-07T14:53:55.857Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:bluecat_networks:adonis:5.0.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "B832AF66-C44C-44EF-ADF7-8793962C2750", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command."}, {"lang": "es", "value": "La Interface de L\u00ednea de Comando (CLI), tambi\u00e9n se conoce como Adonis Administration Console, en el dispositivo DNS/DHCP de BlueCat Networks Adonis versi\u00f3n 5.0.2.8, permite a usuarios administradores locales alcanzar privilegios de root en el sistema operativo subyacente por medio de metacaracteres de shell en un comando."}], "id": "CVE-2007-4390", "lastModified": "2026-04-23T00:35:47.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-08-17T22:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/39398"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/26495"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3025"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/476785/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/477163/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/25342"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1018584"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36082"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39398"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/26495"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3025"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/476785/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/477163/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/25342"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1018584"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36082"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}