← Database

CVE-2008-6556

CRITICAL CVSS: 10.0 Published: 2009-03-30 Modified: 2026-06-16

Description

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command.

Affected Platforms

Puppet Master Webutil

Weakness Type

CWE-20

References