CVE-2008-6793 The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename....
MediumCVSS 6.8
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dflabs ptk | = 0.1 | No fix listed |
| dflabs ptk | = 0.2 | No fix listed |
| dflabs ptk | = 1.0 | No fix listed |
References
- 49574 vdb-entry
- 32553 third-party-advisory
- www.ikkisoft.com
- 20081105 DFLabs PTK Forensic Local Command Execution Vulnerability mailing-list
- 32128 exploit vdb-entry
- ADV-2008-3020 patch vdb-entry vendor-advisory
- ptk-getfiletype-command-execution(46380) vdb-entry
- 7001 exploit