CVE:CVE-2005-2290
CNNVD:CNNVD-200507-196
WPS Web Portal System是一套Web门户系统。
WPS Web Portal System 0.7.0中的wps_shop.cgi存在代码执行漏洞。
远程攻击者可通过art或cat变量中的shell元数据字符执行任意命令。
solution:Upgrade masqmail masqmail to a higher version than 0.0.0,0.0.1,0.0.2,0.0.3,0.0.4,0.0.6,0.0.7,0.0.8,0.0.9,0.0.10,0.0.11,0.0.13,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.1.7,0.1.8,0.1.9,0.1.10,0.1.11,0.1.12,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.12,0.2.13,0.2.14,0.2.15,0.2.16,0.2.17,and avoid the version 0.0.0,0.0.1,0.0.2,0.0.3,0.0.4,0.0.6,0.0.7,0.0.8,0.0.9,0.0.10,0.0.11,0.0.13,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.1.7,0.1.8,0.1.9,0.1.10,0.1.11,0.1.12,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.12,0.2.13,0.2.14,0.2.15,0.2.16,0.2.17