CVE-2007-1836 | BDVDB-2026-23297 Detail

Description#

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the (1) ifconfig and (2) ping commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/23182
http://secunia.com/advisories/24666
http://osvdb.org/34537
http://securityreason.com/securityalert/2516
http://www.securityfocus.com/archive/1/464085/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/33291

Exploit#

No public exploit known

History#

Version 12007-04-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.