NfSen Remote Command Execution Vulnerability
BID:44207
Info
NfSen Remote Command Execution Vulnerability
| Bugtraq ID: | 44207 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2009 12:00AM |
| Updated: | Jun 11 2009 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
NfSen Remote Command Execution Vulnerability
NfSen is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input.
Successful attacks can compromise the affected software and the underlying server.
Versions prior to NfSen 1.3.2 are vulnerable.
NfSen is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input.
Successful attacks can compromise the affected software and the underlying server.
Versions prior to NfSen 1.3.2 are vulnerable.
Exploit / POC
NfSen Remote Command Execution Vulnerability
An attacker can exploit this issue using a browser.
An attacker can exploit this issue using a browser.
Solution / Fix
NfSen Remote Command Execution Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
NfSen Remote Command Execution Vulnerability
References:
References:
- NfSen - Download page (NfSen)
- NfSen - Homepage (NfSen)
- NfSen 1.3.2 - Release Notes and Changelog (NfSen)