← All advisories

Critical severity9.8NVD Advisory· Published Nov 17, 2017· Updated Jun 17, 2026

CVE-2017-1000215

CVE-2017-1000215

Description

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Xrootd/Xrootd2 versions
cpe:2.3:a:xrootd:xrootd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xrootd:xrootd:*:*:*:*:*:*:*:*range: <=4.6.0
- (no CPE)range: <=4.6.0

Patches

Vulnerability mechanics

References

4

github.com/xrootd/xrootd/commit/befa2e627a5a33a38c92db3e57c07d8246a24acfnvdPatchThird Party Advisory
github.com/xrootd/xrootd/blob/befa2e627a5a33a38c92db3e57c07d8246a24acf/src/XrdSecgsi/XrdSecgsiGMAPFunLDAP.ccnvdThird Party Advisory
github.com/xrootd/xrootd/blob/v4.6.1/docs/ReleaseNotes.txtnvdRelease NotesThird Party Advisory
security.gentoo.org/glsa/201903-11nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.