Sophos Web Protection Appliance sblistpack Arbitrary Command Execution (CVE-2013-4983)

A command injection vulnerability has been reported in Sophos Web Protection Appliance. The vulnerability is due to sblistpack component, reachable from the web interface without authentication. An unauthenticated remote attacker could execute arbitrary OS commands on the Sophos appliance...

PT-2013-5314

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.9.1 Sophos Web Appliance versions 3.8 prior to 3.8.1.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to...