PT-2012-4412
CVE-2012-2982
·
تاريخ النشر
2012-09-11
·
تاريخ التحديث
2013-05-30
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Webmin versions 1.590 and earlier
Description
The issue allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname. This can be achieved by using a | (pipe) character in the file/show.cgi endpoint.
Recommendations
For Webmin versions 1.590 and earlier, consider restricting access to the file/show.cgi endpoint until a patch is available. As a temporary workaround, avoid using invalid characters, such as the | (pipe) character, in pathnames to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾