Description
CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.
References
- 54015 vdb-entry
- 20090422 DirectAdmin < 1.33.4 Local file overwrite & Local root escalation mailing-list
- directadmin-cmddb-command-execution(50167) vdb-entry
- 34861 third-party-advisory
- http://www.directadmin.com/features.php?id=968