CVE-2008-5705

EPSS 5.4%

The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7183unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugs.debian.org/506530 http://openwall.com/lists/oss-security/2008/12/17/16 http://securityreason.com/securityalert/4800 https://exchange.xforce.ibmcloud.com/vulnerabilities/46801 https://www.exploit-db.com/exploits/7183 http://www.securityfocus.com/bid/32420