QwikSec

Security Database

CVE

CWE

Training

CVE-2014-2029

Published: Sep 28, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to download configuration information from v.percona.com.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugzilla.novell.com/show_bug.cgi?id=864194

x_refsource_CONFIRM

[oss-security] 20140219 Re: CVE Request: Percona Toolkit automatic version check - remote code execution / information leak

mailing-list

x_refsource_MLIST

https://bugs.launchpad.net/percona-toolkit/+bug/1279502

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.