Puppetmaster - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2009-03-30.

Products

• Webutil - 2 CVEs

Newest CVEs of Puppetmaster

• CVE-2008-6557 - CVSS 10 (critical), 2009-03-30: cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.
• CVE-2008-6555 - CVSS 10 (critical), 2009-03-30: cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command.