remote_support.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) pid1 or (2) pid2 parameter in a stop_remote_support action.
References
Link | Resource |
---|---|
https://www.trustmatta.com/advisories/MATTA-2011-003.txt |
Configurations
Information
Published : 2011-12-13 03:55
Updated : 2011-12-13 03:55
NVD link : CVE-2011-4201
Mitre link : CVE-2011-4201
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
restorepoint
- restorepoint