Description
Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.
References
- 38176 vdb-entry
- http://www.portcullis-security.com/338.php
- fta-menushell-command-execution(56248) vdb-entry