Description
The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands. NOTE: this is only a vulnerability in environments in which the administrator has not followed documentation that outlines the security risks of operating Backburner on untrusted networks.
References
- 1018686 vdb-entry
- 20070911 SYMSA-2007-008: Autodesk Backburner 3.0.2 System Backdoor mailing-list
- 3132 third-party-advisory
- 26797 third-party-advisory
- autodesk-backburner-command-execution(36582) vdb-entry
- 25590 vdb-entry
- http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-008.txt