← volver
CVE-2005-2968

CVE-2005-2968

EPSS 10.7%
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/26288no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txthttps://bugzilla.mozilla.org/show_bug.cgi?id=307185http://secunia.com/advisories/16869http://secunia.com/advisories/17042http://secunia.com/advisories/17090http://secunia.com/advisories/17149http://secunia.com/advisories/17263http://secunia.com/advisories/17284https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11105http://www.debian.org/security/2005/dsa-866http://www.debian.org/security/2005/dsa-868http://www.kb.cert.org/vuls/id/914681