Airtime Remote Arbitrary Shell Command Execution Vulnerability
BID:58670
Info
Airtime Remote Arbitrary Shell Command Execution Vulnerability
| Bugtraq ID: | 58670 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 25 2013 12:00AM |
| Updated: | Mar 25 2013 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Sourcefabric Airtime 2.0.3 Sourcefabric Airtime 2.0.2 |
| Not Vulnerable: | |
Discussion
Airtime Remote Arbitrary Shell Command Execution Vulnerability
Airtime is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input.
An attacker can exploit this issue to execute arbitrary shell commands in the context of the application.
Versions prior to Airtime 2.3.1 are vulnerable.
Airtime is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input.
An attacker can exploit this issue to execute arbitrary shell commands in the context of the application.
Versions prior to Airtime 2.3.1 are vulnerable.
Exploit / POC
Airtime Remote Arbitrary Shell Command Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Airtime Remote Arbitrary Shell Command Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Airtime Remote Arbitrary Shell Command Execution Vulnerability
References:
References:
- Airtime Homepage (Sourcefabric)