Description
The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute.
References
- nexusway-ssh-command-execution(20555) vdb-entry
- 15150 third-party-advisory
- 20050511 [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability mailing-list
- 20050510 [Full-disclosure] [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability mailing-list
- 16447 vdb-entry