Description
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.
References
- 20080321 webutil.pl is still vulnerable against Remote Command Execution. mailing-list
- 28393 vdb-entry
- 51181 vdb-entry
- webutil-shell-command-execution(41400) vdb-entry
- webutil-details-command-execution(49821) vdb-entry