Description
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command.
References
- 20080321 webutil.pl is still vulnerable against Remote Command Execution. mailing-list
- 28393 vdb-entry
- 51181 vdb-entry
- webutil-shell-command-execution(41400) vdb-entry
- webutil-whois-command-execution(49820) vdb-entry