Lucene search
HistoryOct 08, 2012 - 10:47 a.m.
CVE-2011-4639
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.6%
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.
Affected configurations
Node
spamtitanwebtitanRange≤3.50
References
Related
cvelist
cvelist
CVE-2011-4639
2022-10-03 16:15:13
cve
cve
CVE-2011-4639
2022-10-03 16:15:13
prion
prion
Design/Logic Flaw
2012-10-08 10:47:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.6%
Related for NVD:CVE-2011-4639