漏洞描述
The OmniPCX web interface has a script "masterCGI" with a remote command execution vulnerability via the "user" parameter.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2007-3010↗marc.infohttps://marc.info/?l=full-disclosure&m=119002152126755&w=2↗www.redteam-pentesting.dehttp://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php↗www.vupen.comhttp://www.vupen.com/english/advisories/2007/3185↗www1.alcatel-lucent.comhttp://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm↗