Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Mod_Auth_Any远程命令执行漏洞
Vulnerability Description
Apache mod_auth_any WEB服务模块允许Apache httpd服务程序调用任意外部程序验证用户密码。 mod_auth_any WEB服务模块在调用外部程序时对参数缺少正确过滤，远程攻击者可以利用这个漏洞以WEB权限在系统上执行任意命令。 RedHat Enterprise Linux包含mode_auth_any在调用外部程序时没有检查SHELL元字符数据，允许攻击者提供通过使用SHELL元字符数据作为参数提交给mode_auth_any模块，可导致以WEB权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A