Serve Vulnerable to Directory Traversal Bug 3. Cisco Content Service Switch 11000 Series Web Management Vulnerability 4. This allows remote attackers to execute arbitrary commands on the remote server running those debugging tools. The whois.cgi, ping.cgi and finger.cgi script of Fastgraf perform almost no metacharcter checking. This enables attackers to execute commands as uid of the webserver.
Attackers are therefore still able to use pipes, redirection characters and so on.
The information has been provided by Marco van Berkum . Security Ltd. All rights reserved. Terms of Use Site Privacy Statement .