← Database

CVE-2008-6555

CRITICAL CVSS: 10.0 Published: 2009-03-30 Modified: 2026-06-16

Description

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command.

Affected Platforms

Puppetmaster Webutil

Weakness Type

CWE-20

References