CVE-2009-1361 — HIGH (10.0)

Vulnerability Description

dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Gscripts	Dns Tools	All versions

Related Weaknesses (CWE)

CWE-20

References

http://secunia.com/advisories/34773Vendor Advisory
http://secunia.com/advisories/34773Vendor Advisory

FAQ

What is CVE-2009-1361?

CVE-2009-1361 is a vulnerability with a CVSS score of 10.0 (HIGH). dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details...

How severe is CVE-2009-1361?

CVE-2009-1361 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-1361?

Check the references section above for vendor advisories and patch information. Affected products include: Gscripts Dns Tools.