medium6.8Public exploit code
CVE-2010-4099
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NitroView ESM - 'ess.pm' Remote Command Execution2010-10-26 · remote · linux · Verified
- NitroSecurity ESM 8.4.0a - Remote Code Execution2010-10-26 · remote · linux
Impact
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nitrosecurity | Nitroview Esm Software | Version 8.4.0a |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/15318
- http://www.securityfocus.com/bid/44421
- http://www.securitytracker.com/id?1024639
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62768
- http://www.exploit-db.com/exploits/15318
- http://www.securityfocus.com/bid/44421
- http://www.securitytracker.com/id?1024639
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62768