Lucene search

K
cve[email protected]CVE-2009-1361
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-1361

2022-10-0316:24:00
CWE-20
web.nvd.nist.gov
23
cve-2009-1361
gscripts.net
dns tools
remote code execution
shell metacharacters

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.003

Percentile

70.5%

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
gscriptsdns_tools
VendorProductVersionCPE
gscriptsdns_toolscpe:/a:gscripts:dns_tools::::

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.003

Percentile

70.5%

Related for CVE-2009-1361