Vulnerabilities > Puppetmaster

DATE CVE VULNERABILITY TITLE RISK
2009-03-30 CVE-2008-6557 Improper Input Validation vulnerability in Puppetmaster Webutil 2.7
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.
network
low complexity
puppetmaster CWE-20
critical
 10.0
10
2009-03-30 CVE-2008-6555 Improper Input Validation vulnerability in Puppetmaster Webutil 2.3/2.7
cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command.
network
low complexity
puppetmaster CWE-20
critical
 10.0
10