CVE-2007-1836

https://notcve.org/view.php?id=CVE-2007-1836

The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the (1) ifconfig and (2) ping commands. La linea de comando de la interafaz de administración en Data Domain OS anterior a 4.0.3.6 permite a usuarios remotos validados ejecutar comandos de su elección a través de los metacaracteres de la shell en ciertos argumentos en varios comandos, como se demostró por los argumentos del interfaz en los comandos (1) ifconfig y (2) ping. • http://osvdb.org/34537 http://secunia.com/advisories/24666 http://securityreason.com/securityalert/2516 http://www.securityfocus.com/archive/1/464085/100/0/threaded http://www.securityfocus.com/bid/23182 https://exchange.xforce.ibmcloud.com/vulnerabilities/33291 •