CVE-2008-6557 cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppetmaster webutil | = 2.7 | No fix listed |
References
- 51181 exploit vdb-entry
- 20080321 webutil.pl is still vulnerable against Remote Command Execution. mailing-list
- 28393 exploit vdb-entry
- webutil-shell-command-execution(41400) vdb-entry
- webutil-details-command-execution(49821) vdb-entry