jetlib.sec » Tags » gauntlet-firewall

eEye Retina audit scripts have the capability to run remote shell scripts in order to determine vulnerable applications. One audit script in particular (audit ID 2499) uses find(1) and execute (-exec) when assessing a vulnerability within Gauntlet Firewall. An attacker who can write an executable file in the portion of the file system searched with the find command may be able to exploit this vulnerability to execute arbitrary code with the same privileges provided to Retina to perform a vulnerability scan.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags:  vulnerability retina audit gauntlet-firewall shell-scripts remote-shell