{"id":"CVE-2009-0545","aliases":[],"url":"https://o3.security/vulnerability/CVE-2009-0545","summary":"cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.","details":"cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.","published":"2009-02-12T23:00:00.000Z","modified":"2024-08-07T04:40:03.773Z","cvss":null,"epss":{"score":0.90386,"percentile":0.99793,"asOf":"2026-09-15"},"cisaKev":null,"exploitsKnown":3,"affectedPackages":[],"fix":null,"references":[{"type":"REPORT","url":"http://www.securityfocus.com/archive/1/500763/100/0/threaded"},{"type":"WEB","url":"http://www.zeroshell.net/eng/announcements/"},{"type":"EXPLOIT","url":"https://www.exploit-db.com/exploits/8023"},{"type":"WEB","url":"http://www.ikkisoft.com/stuff/LC-2009-01.txt"},{"type":"WEB","url":"http://www.vupen.com/english/advisories/2009/0385"},{"type":"WEB","url":"http://www.zeroshell.net/eng/patch-details/#C100"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-07T04:40:03.773Z"}}