CVE-2012-10033 Narcissus backend.php Image Configuration Command Injection
CriticalCVSS 9.3
EPSS 2.0%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configure_image() function. This function invokes PHP’s passthru() with the unsanitized input, allowing attackers to inject arbitrary system commands. Exploitation occurs via a crafted POST request, resulting in command execution under the web server’s context.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Ångström Distribution Project Narcissus | All versions | No fix listed |
References
- raw.githubusercontent.com exploit
- www.exploit-db.com exploit
- www.exploit-db.com exploit
- web.archive.org product
- www.vulncheck.com third-party-advisory