Description
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "`" (backtick) characters in the appliance's command line interface (CLI).
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- NetAccess IP3 - (Authenticated) Ping Option Command Injection EDB-9688 · local · Sep 15, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2006-1540 vdb-entry
- 793 third-party-advisory
- ip3-na75-backtick-command-injection(26108) vdb-entry
- 20060424 Multiple vulnerabilities in IP3 Networks 'NetAccess' NA75 appliance mailing-list
- 17698 vdb-entry
- 19818 third-party-advisory