Lucene search
RedhatCVELIST:CVE-2013-0232HistoryMar 20, 2013 - 3:00 p.m.
CVE-2013-0232
2013-03-2015:00:00
redhat
www.cve.org
includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=698910
itsecuritysolutions.org/2013-01-22-ZoneMinder-Video-Server-arbitrary-command-execution-vulnerability/
www.debian.org/security/2013/dsa-2640
www.exploit-db.com/exploits/24310
www.openwall.com/lists/oss-security/2013/01/28/2
www.osvdb.org/89529
www.zoneminder.com/forums/viewtopic.php?f=29&t=20771
Related
checkpoint_advisories
checkpoint_advisories
ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)
2014-06-25 00:00:00
ubuntucve
ubuntucve
CVE-2013-0232
2013-03-20 00:00:00
prion
prion
Command injection
2013-03-20 15:55:00
nvd
nvd
CVE-2013-0232
2013-03-20 15:55:00
cve
cve
CVE-2013-0232
2013-03-20 15:55:00
debiancve
debiancve
CVE-2013-0232
2013-03-20 15:55:00
openvas
openvas
Debian Security Advisory DSA 2640-1 (zoneminder - several issues)
2013-03-14 00:00:00
Debian: Security Advisory (DSA-2640-1)
2013-03-13 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2640-1] zoneminder security update
2013-05-06 00:00:00
nessus
nessus
Debian DSA-2640-1 : zoneminder - several issues
2013-03-15 00:00:00
osv
osv
zoneminder - several issues
2013-03-14 00:00:00
debian
debian
[SECURITY] [DSA 2640-1] zoneminder security update
2013-03-14 18:04:52