Description
Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes launched by PTK's Apache HTTP Server via (1) "external tools" or (2) a crafted forensic image.
References
- http://www.kb.cert.org/vuls/id/RGII-7Q4GBJ
- http://ptk.dflabs.com/faq.html
- VU#845747 third-party-advisory
- 34111 vdb-entry
- http://ptk.dflabs.com/security.html
- ptk-unspecified-command-execution(49235) vdb-entry