CVE-2010-0418

The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.

Score

CVSS 2.0 10.0 Critical

Status

Modified - secalert@redhat.com

Published

2010-03-10

Last modified

2024-08-07

Weaknesses

CWE-78

Affected products

• Chumby Classic (Chumby)
• Chumby One (Chumby)

References

• http://secunia.com/advisories/38972
• http://www.awe.com/mark/blog/20100305.html
• http://www.chumby.com/pages/release10mar