Back to search
CVE-2016-5840
Published: Jun 30, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.zerodayinitiative.com/advisories/ZDI-16-373
x_refsource_MISC
JVNDB-2016-000103
third-party-advisory
x_refsource_JVNDB
JVN#55428526
third-party-advisory
x_refsource_JVN
40180
exploit
x_refsource_EXPLOIT-DB
http://esupport.trendmicro.com/solution/en-US/1114281.aspx
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now