CVE-2009-0545 : cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to e

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

Published 2009-02-12 23:30:01

Updated 2018-10-10 19:29:01

Source MITRE

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2009-0545

Zeroshell » Zeroshell » Version: 1.0 Update Beta11
cpe:2.3:a:zeroshell:zeroshell:1.0:beta11:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta4
cpe:2.3:a:zeroshell:zeroshell:1.0:beta4:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta3
cpe:2.3:a:zeroshell:zeroshell:1.0:beta3:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta6
cpe:2.3:a:zeroshell:zeroshell:1.0:beta6:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta5
cpe:2.3:a:zeroshell:zeroshell:1.0:beta5:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta8
cpe:2.3:a:zeroshell:zeroshell:1.0:beta8:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta7
cpe:2.3:a:zeroshell:zeroshell:1.0:beta7:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta10
cpe:2.3:a:zeroshell:zeroshell:1.0:beta10:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta9
cpe:2.3:a:zeroshell:zeroshell:1.0:beta9:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta2
cpe:2.3:a:zeroshell:zeroshell:1.0:beta2:*:*:*:*:*:*
Matching versions
Zeroshell » Zeroshell » Version: 1.0 Update Beta1
cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-0545

EPSS FAQ

93.97%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2009-0545

ZeroShell Remote Code Execution

Disclosure Date: 2013-09-22

First seen: 2020-04-26

exploit/unix/webapp/zeroshell_exec

This module exploits a vulnerability found in ZeroShell 2.0 RC2 and lower. It will leverage an unauthenticated local file inclusion vulnerability in the "/cgi-bin/kerbynet" url. The file retrieved is "/var/register/system/ldap/rootpw". This file contains the admin pa

More information

CVSS scores for CVE-2009-0545

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-0545

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-0545

Jump to