← Database

CVE-2009-0545

CRITICAL CVSS: 10.0 Published: 2009-02-12 Modified: 2026-06-16

Description

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

Affected Platforms

Zeroshell Zeroshell

Weakness Type

CWE-20

References