Description
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter.
References
- 1018190 vdb-entry
- 25563 third-party-advisory
- http://www.s21sec.com/avisos/s21sec-035-en.txt
- 20070604 S21Sec-035: F5 FirePass command execution vulnerability mailing-list
- firepass-myactivation-command-execution(34708) vdb-entry
- ADV-2007-2073 vdb-entry
- 24306 vdb-entry
- 35246 vdb-entry