CVEvulnerability
CVE-2007-1836
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the (1) ifconfig and (2) ping commands.
Affected configurations
• data domain data domain os (<= 4.0.3.5)
References
- http://osvdb.org/34537 osvdb.org
- http://secunia.com/advisories/24666 secunia.com
- http://securityreason.com/securityalert/2516 securityreason.com
- http://www.securityfocus.com/archive/1/464085/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23182 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33291 exchange.xforce.ibmcloud.com
- http://osvdb.org/34537 osvdb.org
- http://secunia.com/advisories/24666 secunia.com
- http://securityreason.com/securityalert/2516 securityreason.com
- http://www.securityfocus.com/archive/1/464085/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23182 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33291 exchange.xforce.ibmcloud.com