CVE-2009-3102: Improper Input Validation

The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager ZRM for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQLBINPATH variable...

Zmanda Recovery Manager for MySQL socket-server.pl MYSQL_BINPATH Variable Command Execution

The remote service appears to be Zmanda Recovery Manager ZRM for MySQL's socket-server.pl. ZRM for MySQL offers a backup and recovery solution for MySQL, and the socket-server.pl component typically runs on a MySQL server out of xinetd to support remote operations. The installed version of...