acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line.
References
Link | Resource |
---|---|
http://b3n7s.github.io/acccheck-command-injection.html | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-06-13 04:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-12268
Mitre link : CVE-2018-12268
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
acccheck_project
- acccheck.pl