CVE-2014-5073 vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
HighCVSS 7.5
EPSS 76.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmturbo operations manager | <= 4.6 | No fix listed |
| vmturbo operations manager | = 4.0 | No fix listed |
| vmturbo operations manager | = 4.5 | No fix listed |
| vmturbo operations manager | = 4.5-1 | No fix listed |
References
- disse.cting.org exploit
- packetstormsecurity.com exploit
- 58880 third-party-advisory
- secunia.com
- 34335 exploit
- 109572 vdb-entry
- 69225 exploit vdb-entry
- vmturbo-cve20145073-cmd-exec(95319) vdb-entry