high7.5Public exploit code
CVE-2005-2777
Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Looking Glass 20040427 - Remote Command Execution2005-08-27 · webapps · php · Verified
Impact
Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Looking Glass | Looking Glass | Version 2004-04-27 |
References
- NVD record
- CVE.org record
- http://de-neef.net/articles.php?id=2&page=2
- http://marc.info/?l=bugtraq&m=112516327607001&w=2
- http://rgod.altervista.org/lookingglass.html
- http://secunia.com/advisories/16607/
- http://www.securityfocus.com/bid/14682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22045
- http://de-neef.net/articles.php?id=2&page=2
- http://marc.info/?l=bugtraq&m=112516327607001&w=2
- http://rgod.altervista.org/lookingglass.html
- http://secunia.com/advisories/16607/
- http://www.securityfocus.com/bid/14682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22045