Electric Sheep Fencing pfSense 'graph' Parameter Command Execution Vulnerability

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A security vulnerability exists in Electric Sheep Fencing pfSense versions prior to 2.3. A remote attacker can exploit this vulnerability by sending the 'graph' paramet...

PT-2014-6054

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.1.4 Description The issue allows remote authenticated users to execute arbitrary commands. This can be achieved through various means, including the hostname value to "diag dns.php" in a Create Alias action, the...