Aruba Networks ArubaOS Remote Command Injection Vulnerability

Release date: 2012-03-20
Updated on: 2012-03-21

Affected Systems:
Aruba Networks ArubaOS 6.0.1.1
Aruba Networks ArubaOS 6.0
Aruba Networks ArubaOS 5.0.3.2
Aruba Networks ArubaOS 5.0.3.0
Aruba Networks ArubaOS 5.0.2.1
Aruba Networks ArubaOS 5.0.2.0
Aruba Networks ArubaOS 5.0.0
Unaffected system:
Aruba Networks ArubaOS 6.1.2.4
Aruba Networks ArubaOS 6.0.2.1
Aruba Networks ArubaOS 5.0.4.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52570

ArubaOS uniquely integrates security, mobility, Application Awareness, management, and RF tuning services, allowing users to access wireless networks in the safest and most reliable way anytime and anywhere.

ArubaOS has a remote command injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary commands.

<* Source: Greg Ose

Link: http://www.arubanetworks.com/support/alerts/aid-031912.asc
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Aruba Networks
--------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.arubanetworks.com/