CVE-2007-1836

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

CVE-2007-1836: Undefined Security Weakness

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...

Data Domain管理接口本地特权提升漏洞

Data Domain的DDX阵列系列是业界第一个企业数据中心级的基于“重复数据删除Deduplication＂技术数据保护阵列。 Data Domain传递数据到UNIX SHELL执行时不正确过滤用户输入，本地攻击者可以利用漏洞提升特权。 Data Domain管理接口的多个命令简单的调用UNIX命令，如ping, ifconfig, date, netstat, uptime等，传递给这些命令的参数缺少验证，通过特殊构建参数，可导致注入特殊SHELL字符而执行SHELL命令。 Data Domain Data Domain OS 3.0 Data Domain Data Domai...