CVE-2008-6793 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-6793
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-6793

Description: The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/46380 SAID Secunia Advisory: SA32553 OSVDB 49574 MISC http://www.ikkisoft.com/stuff/LC-2008-07.txt MILW0RM http://www.milw0rm.com/exploits/7001 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/498081/100/0/threaded BID 32128

Return to the previous page.