Threat Intelligence Database

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the parse_artifact.sh script. The vulnerability arises because usernames and home directory paths from /etc/passwd are directly substituted into command strings without proper escaping before being executed via eval. This allows attackers to inject shell metacharacters and execute arbitrary commands on the host system. The vulnerability has a high severity score of 8.5 and requires user interaction but no privileges. No official patch or remediation guidance is currently available.

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can exploit this vulnerability through crafted evidence inputs, mounted images with hostile filenames, or tampered artifact definitions to achieve remote code execution on the analyst's host when processing evidence.

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function. This occurs because command output lines are inserted into command strings via sed without proper escaping before being evaluated with eval. An attacker can exploit this by crafting malicious filenames or artifact definitions containing shell metacharacters to execute arbitrary commands on the host system.