CVE:CVE-2014-2959
CNNVD:CNNVD-201406-022
Dell PowerVault ML6000和Quantum Scalar i500都是磁带库产品，它用于大容量数据存储且能够为存储环境提供更快速、更可靠的数据保护。前者是美国戴尔（Dell）公司的产品；后者是美国昆腾（Quantum）公司的产品。
使用i8.2.0.1 (641G.GS003)之前版本固件的Dell PowerVault ML6000磁带备份系统和使用i8.2.2.1 (646G.GS002)及之前版本的固件Quantum Scalar i500磁带备份系统中的logViewer.htm页面存在安全漏洞。远程攻击者可借助‘pathname’参数中的shell元字符利用该漏洞执行任意命令。
solution:Upgrade dell powervault_ml6000_firmware to a higher version than i8.2.0.1_\(641g.gs003\,and avoid the version (,i8.2.0.1_\(641g.gs003\)]; Upgrade dell powervault_ml6000 to a higher version than 32u,41u,and avoid the version 32u,41u; Upgrade quantum scalar_i500_firmware to a higher version than i8.2.2.1_\(646g.gs002\,and avoid the version (,i8.2.2.1_\(646g.gs002\)]; Upgrade quantum scalar_i500 to a higher version than 5u,14u,23u,and avoid the version 5u,14u,23u