Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

SCAN:METASPLOIT:TWIKI-CONF-CMD

Severity

High

Recommended

No

Recommended Action

Drop

Category

SCAN

Keywords

Metapsloit TWiki Configuration Command Execution

Release Date

2006/08/23

Update Number

1213

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

SCAN: Metapsloit TWiki Configuration Command Execution


This signature detects attempts to exploit a known vulnerability against TWiki. Twiki versions 4.0.4 and earlier are vulnerable. A successful attack can lead to arbitrary code execution.

Extended Description

TWiki is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process.

Affected Products

  • TWiki 4.0.1
  • TWiki 4.0.2
  • TWiki 4.0.3
  • TWiki 4.0.4
  • TWiki

References

  • BugTraq: 19188
  • CVE: CVE-2006-3819
  • URL: http://twiki.org/cgi-bin/view/Codev/TWikiSecurityAlerts
  • URL: http://www.frsirt.com/english/advisories/2006/2995

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out