CVE:CVE-2008-3882
CNNVD:CNNVD-200809-012
ZoneMinder是一款针对摄像机的安全监督软件。
ZoneMinder 1.23.3以及之前的版本存在未明"指令注入"漏洞。远程攻击者可以借助(1)zm_html_view_events.php中的执行过滤函数和(2)到zm_html_view_state.php的run_state参数，执行任意代码。
solution:Upgrade zoneminder zoneminder to a higher version than 1.23.3,0.0.1,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,1.17.0,1.17.1,1.17.2,1.18.0,1.18.1,1.19.0,1.19.1,1.19.2,1.19.3,1.19.4,1.19.5,1.20.0,1.20.1,1.21.0,1.21.1,1.21.2,1.21.3,1.21.4,1.22.0,1.22.1,1.22.2,1.22.3,1.23.0,1.23.1,1.23.2,and avoid the version (,1.23.3],0.0.1,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,1.17.0,1.17.1,1.17.2,1.18.0,1.18.1,1.19.0,1.19.1,1.19.2,1.19.3,1.19.4,1.19.5,1.20.0,1.20.1,1.21.0,1.21.1,1.21.2,1.21.3,1.21.4,1.22.0,1.22.1,1.22.2,1.22.3,1.23.0,1.23.1,1.23.2