Description
The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for (1) nslookup.cgi or (2) ping.cgi.
References
- 15150 third-party-advisory
- 20050511 [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability mailing-list
- nexusway-web-command-execution(20557) vdb-entry
- 20050510 [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability mailing-list
- 16449 vdb-entry
- 16448 vdb-entry