Description
Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
References
- 4353 vdb-entry
- penguin-nslookup-command-execution(8601) vdb-entry
- 20020322 Re: PHP script: Penguin Traceroute, Remote Command Execution mailing-list