Endian Firewall OS Command Injection Vulnerability

Endian Firewall is a suite of unified risk management tools based on Red Hat Enterprise Linux. The Endian Firewall cgi-bin/chpasswd.cgi file fails to adequately filter the 'NEWPASSWORD1' and 'NEWPASSWORD2' parameters, allowing remote attacker to submit special requests to execute arbitrary comman...