CVE-2010-3753

programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell…

published October 5, 2010

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02409 · 84.0th percentile
Published
2010-10-05T21:00Z
EPSS history
Timeline
  • 05 OCT 21:00Z
    programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell…
    cvelistv5