EUVD-2013-6684

Malware in sbrugna...

EUVD-2013-6685

Malware in sbrugna...

Design/Logic Flaw

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 sector size or 2 skip count fields for the forensic imaging task...

CVE-2013-6881

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 sector size or 2 skip count fields for the forensic imaging task...

CVE-2013-6882

Affected product: CRU Ditto Forensic FieldStation (firmware 2013Oct15a and earlier). Vulnerabilities documented: Multiple cross-site scripting (XSS) vulnerabilities via the username parameter during login and via unspecified form fields for authenticated users. In addition, related exploit materi...