CVE-2007-3011 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3011
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3011

Description: The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35257 SREASON http://securityreason.com/securityalert/2858 SAID Secunia Advisory: SA25944 OSVDB 37835 MISC http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/472800/100/0/threaded BID 24762

Return to the previous page.