Lucene search
HistoryMar 30, 2009 - 8:30 p.m.
CVE-2008-6557
cve-2008-6557
webutil.pl
puppet master
remote command execution
nvd
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.
Affected configurations
Node
puppetmasterwebutilMatch2.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| puppetmaster:webutil | puppetmaster webutil | eq | 2.7 |
Related
cvelist
cvelist
CVE-2008-6557
2009-03-30 20:00:00
prion
prion
Command injection
2009-03-30 20:30:00
nvd
nvd
CVE-2008-6557
2009-03-30 20:30:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
Related for CVE-2008-6557