Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-4639
cve-2011-4639
traceroute
ping
spamtitan webtitan
remote code execution
shell metacharacters
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.6%
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.
Affected configurations
Node
spamtitanwebtitanRange≤3.50
| CPE | Name | Operator | Version |
|---|---|---|---|
| spamtitan:webtitan | spamtitan webtitan | le | 3.50 |
References
Related
nvd
nvd
CVE-2011-4639
2012-10-08 10:47:44
cvelist
cvelist
CVE-2011-4639
2022-10-03 16:15:13
prion
prion
Design/Logic Flaw
2012-10-08 10:47:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.6%
Related for CVE-2011-4639