CVE-2009-0545

N/A Unknown

Published: February 12, 2009 Modified: April 23, 2026

Description

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.ikkisoft.com/stuff/LC-2009-01.txt

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/500763/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0385

Source: cve@mitre.org

http://www.zeroshell.net/eng/announcements/

Source: cve@mitre.org

Patch Vendor Advisory

http://www.zeroshell.net/eng/patch-details/#C100

Source: cve@mitre.org

Patch

https://www.exploit-db.com/exploits/8023

Source: cve@mitre.org

http://www.ikkisoft.com/stuff/LC-2009-01.txt