CVE-2010-20059: Improper Neutralization of Special Elements used in an OS Command

FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The execraw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation...

FreeNAS 'exec_raw.php' Arbitrary Command Execution

The version of FreeNAS on the remote host fails to restrict access to its 'execraw.php' script. A remote, unauthenticated attacker can pass arbitrary commands through the script's 'cmd' parameter and have them executed with administrative privileges. %NASLMINLEVEL 70300 C Tenable Network Security...