high7.5Public exploit code
CVE-2005-2483
Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Karrigell 1.x/2.0/2.1 - '.KS' File Arbitrary Python Command Execution2005-07-31 · webapps · cgi · Verified
Impact
Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services (.ks) script, which can reference functions from libraries that are used by that script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Karrigell | Karrigell | Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16319
- http://sourceforge.net/mailarchive/forum.php?thread_id=7863293&forum_id=32318
- http://sourceforge.net/mailarchive/message.php?msg_id=12539317
- http://www.osvdb.org/18506
- http://www.securityfocus.com/bid/14463
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21668
- http://secunia.com/advisories/16319
- http://sourceforge.net/mailarchive/forum.php?thread_id=7863293&forum_id=32318
- http://sourceforge.net/mailarchive/message.php?msg_id=12539317
- http://www.osvdb.org/18506
- http://www.securityfocus.com/bid/14463
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21668