CVE-2005-2334

The CVE-2005-2334 entry describes a remote command execution vulnerability in Y.SAK where shell metacharacters in the $no variable allow an attacker to run arbitrary commands via three CGI scripts: w_s3mbfm.cgi, w_s3adix.cgi, or w_s3sbfm.cgi. The available sources confirm the vulnerable component...

CVE-2005-2334: Undefined Security Weakness

Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to 1 ws3mbfm.cgi, 2 ws3adix.cgi, or 3 ws3sbfm.cgi...