PT-2007-7073 · Ispmanager · Ispmanager

Published 2007-11-30 · Updated 2017-07-29 · CVE-2007-6182

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ISPmanager version 4.2.15.1

Description The issue allows local users to gain privileges via shell metacharacters in command line arguments. This is related to the responder program in ISPmanager.

Recommendations For version 4.2.15.1, consider restricting access to the responder program until a patch is available. As a temporary workaround, avoid using shell metacharacters in command line arguments to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-6182

Affected Products

Ispmanager

References · 8

• 🔥 http://fortconsult.net/images/pdf/advisories/ispmgr_nov2007.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/30780 · Exploit
• http://secunia.com/advisories/27585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6182 · Security Note
• http://ispsystem.com/en/support/changelog/ispmgr.html?all=yes · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38564 · Note
• http://securityfocus.com/bid/26503 · Note
• http://osvdb.org/42337 · Note