PT-2007-7293
CVE-2007-6459
·
تاريخ النشر
2007-12-20
·
تاريخ التحديث
2018-10-15
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Anon Proxy Server versions 0.100 through 0.101
Description
The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the
host parameter to "diagdns.php" and the host parameter, and possibly the port parameter to "diagconnect.php".Recommendations
For Anon Proxy Server versions 0.100 through 0.101, consider disabling access to the diagdns.php and diagconnect.php scripts until a patch is available. Restrict input for the
host and port parameters in these scripts to prevent command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾