Michael Tremer a9a91e5fa7 ids.cgi: Fix remote command execution vulnerability ...

The OINKCODE variable was only validated for proper input
when the Save button was clicked.

Did the user demand to download new rules instead, the
content of that variable was not being validated (again)
and was passed to wget on the shell.

This was done with privileges of the "nobody" user.

Fixes #11401

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2017-06-14 12:58:12 +01:00

23 KiB

Raw Blame History

View Raw