WPS Wps_shop.CGI Remote Command Execution Vulnerability
BID:14245
Info
WPS Wps_shop.CGI Remote Command Execution Vulnerability
| Bugtraq ID: | 14245 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2005 12:00AM |
| Updated: | Jul 13 2005 12:00AM |
| Credit: | Discovery is credited to <[email protected]>. |
| Vulnerable: |
WPS WPS 0.7 |
| Not Vulnerable: | |
Discussion
WPS Wps_shop.CGI Remote Command Execution Vulnerability
WPS is prone to a remote arbitrary command execution vulnerability.
Reportedly, this issue arises when user-specified values are passed to the 'wps_shop.cgi' script.
Due to this, an attacker can supply arbitrary commands and have them executed in the context of the server.
This issue may facilitate unauthorized remote access in the context of the Web server to the affected computer.
WPS is prone to a remote arbitrary command execution vulnerability.
Reportedly, this issue arises when user-specified values are passed to the 'wps_shop.cgi' script.
Due to this, an attacker can supply arbitrary commands and have them executed in the context of the server.
This issue may facilitate unauthorized remote access in the context of the Web server to the affected computer.
Exploit / POC
WPS Wps_shop.CGI Remote Command Execution Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
WPS Wps_shop.CGI Remote Command Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
WPS Wps_shop.CGI Remote Command Execution Vulnerability
References:
References: