Endian Firewall OS Command Injection Vulnerability

Endian Firewall is a suite of unified risk management tools based on Red Hat Enterprise Linux. The Endian Firewall cgi-bin/chpasswd.cgi file fails to adequately filter the 'NEWPASSWORD1' and 'NEWPASSWORD2' parameters, allowing remote attacker to submit special requests to execute arbitrary comman...

Code injection

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

PT-2015-3057

Name of the Vulnerable Software and Affected Versions Endian Firewall versions prior to 3.0 Description The issue is related to the lack of input validation in the Endian Firewall. It allows a remote attacker to execute arbitrary commands by passing metacharacters through the NEW PASSWORD 1 or NE...

CVE-2015-5082: Improper Neutralization of Special Elements used in a Command

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...