Description
Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter.
References
- 19520 vdb-entry
- http://www.cirt.net/advisories/alkalay.shtml
- 16880 third-party-advisory
- http://www.alkalay.net/software
- 14893 vdb-entry
- nslookup-command-injection(22354) vdb-entry
- ADV-2005-1809 vdb-entry