EUVD-2007-2350

Malware in sbrugna...

Code injection

The geturl function in DODSDispatch.pm for the CGIserver in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2007-2355

CVE-2007-2355 affects the OPeNDAP 3 CGI_server, where the get_url function in DODS_Dispatch.pm is vulnerable to remote command execution via shell metacharacters in a URL. This is a remote, unauthenticated vulnerability with high impact (complete confidentiality, integrity, and availability). Mit...