Mutiny < 4.5-1.12 Unspecified Network Interface Menu Remote Command Injection

The remote web server hosts a version of Mutiny earlier than 4.5-1.12. It is, therefore, reportedly affected by a command injection vulnerability that could allow an authenticated attacker to execute arbitrary commands via the network interface menu. Note that Nessus has not tested for this issue...

Mutiny Command Injection Vulnerability

Mutiny is prone to a command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands with root privileges. Mutiny versions prior to 4.5-1.12 are vulnerable. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced source...

Mutiny Detection

Detection of Mutiny. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-3001

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

Command injection

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

CVE-2012-3001

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

CVE-2012-3001

Mutiny Standard before 4.5-1.12 is vulnerable to a command-injection in the network-interface menu. An authenticated attacker can trigger arbitrary commands with root privileges via the admin interface; patches exist in 4.5-1.12 or newer. This is evidenced by multiple sources (NVD, CERT, OpenVAS,...

Mutiny Remote Command Execution

This module exploits an authenticated command injection vulnerability in the Mutiny appliance. Versions prior to 4.5-1.12 are vulnerable. In order to exploit the vulnerability the mutiny user must have access to the admin interface. The injected commands are executed with root privileges. This...

PT-2012-4425

Name of the Vulnerable Software and Affected Versions Mutiny Standard versions prior to 4.5-1.12 Description The issue allows remote attackers to execute arbitrary commands via the network-interface menu, related to a command injection vulnerability. Recommendations For versions prior to 4.5-1.12...

CVE-2012-3001: Improper Neutralization of Special Elements used in an OS Command

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a "command injection vulnerability."...

Mutiny Technology virtual appliance command injection vulnerability

Overview The Mutiny Technology virtual appliance contains a command injection vulnerability which could allow an attacker to inject commands into the appliance. Description CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'The Mutiny Technology virtual...

Unfixed XSS vulnerability at www.poker-edge.com

Security researcher Mutiny, has submitted on 20/01/2008 a cross-site-scripting XSS vulnerability affecting www.poker-edge.com, which at the time of submission ranked 88409 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/03/2008. It is...