CVE-2008-6556 cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command.
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet master webutil | = 2.3 | No fix listed |
References
- 51181 exploit vdb-entry
- 20080321 webutil.pl is still vulnerable against Remote Command Execution. mailing-list
- 28393 exploit vdb-entry
- webutil-shell-command-execution(41400) vdb-entry
- webutil-whois-command-execution(49820) vdb-entry