CVE-2009-0545

EUVD-2009-0549
cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
zeroshellzeroshell
1.0:beta1
zeroshellzeroshell
1.0:beta10
zeroshellzeroshell
1.0:beta11
zeroshellzeroshell
1.0:beta2
zeroshellzeroshell
1.0:beta3
zeroshellzeroshell
1.0:beta4
zeroshellzeroshell
1.0:beta5
zeroshellzeroshell
1.0:beta6
zeroshellzeroshell
1.0:beta7
zeroshellzeroshell
1.0:beta8
zeroshellzeroshell
1.0:beta9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ikkisoft.com/stuff/LC-2009-01.txt
http://www.securityfocus.com/archive/1/500763/100/0/threaded
http://www.vupen.com/english/advisories/2009/0385
http://www.zeroshell.net/eng/announcements/
http://www.zeroshell.net/eng/patch-details/#C100
https://www.exploit-db.com/exploits/8023
http://www.ikkisoft.com/stuff/LC-2009-01.txt
http://www.securityfocus.com/archive/1/500763/100/0/threaded
http://www.vupen.com/english/advisories/2009/0385
http://www.zeroshell.net/eng/announcements/
http://www.zeroshell.net/eng/patch-details/#C100
https://www.exploit-db.com/exploits/8023