Unscored severity · published Jun 4, 2009
CVE-2009-1916
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter
–
CVSS
10.3%
EPSS
No
On KEV
Description
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DT
Dns Tools · Gscripts
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1916
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1916
Vendor Advisory
http://secunia.com/advisories/34773
Exploit
http://www.securityfocus.com/bid/34559
www.exploit-db.com
https://www.exploit-db.com/exploits/8454
More from Dns Tools
–
CVE-2009-1361
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter