{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-03-28T00:00:00", "descriptions": [{"lang": "en", "value": "The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the (1) ifconfig and (2) ping commands."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "23182", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23182"}, {"name": "24666", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24666"}, {"name": "34537", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/34537"}, {"name": "2516", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2516"}, {"name": "20070328 Arbitrary Command Execution in DataDomain Administrator Interface", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/464085/100/0/threaded"}, {"name": "datadomain-admininterface-command-execution(33291)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33291"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-1836", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the (1) ifconfig and (2) ping commands."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "23182", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23182"}, {"name": "24666", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24666"}, {"name": "34537", "refsource": "OSVDB", "url": "http://osvdb.org/34537"}, {"name": "2516", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2516"}, {"name": "20070328 Arbitrary Command Execution in DataDomain Administrator Interface", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/464085/100/0/threaded"}, {"name": "datadomain-admininterface-command-execution(33291)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33291"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:13:40.996Z"}, "title": "CVE Program Container", "references": [{"name": "23182", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23182"}, {"name": "24666", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24666"}, {"name": "34537", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/34537"}, {"name": "2516", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2516"}, {"name": "20070328 Arbitrary Command Execution in DataDomain Administrator Interface", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/464085/100/0/threaded"}, {"name": "datadomain-admininterface-command-execution(33291)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33291"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-1836", "datePublished": "2007-04-03T00:00:00", "dateReserved": "2007-04-02T00:00:00", "dateUpdated": "2024-08-07T13:13:40.996Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:data_domain:data_domain_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "71AD696B-4E4E-4216-9CFC-4AC0408AFD1A", "versionEndIncluding": "4.0.3.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the (1) ifconfig and (2) ping commands."}, {"lang": "es", "value": "La linea de comando de la interafaz de administraci\u00f3n en Data Domain OS anterior a 4.0.3.6 permite a usuarios remotos validados ejecutar comandos de su elecci\u00f3n a trav\u00e9s de los metacaracteres de la shell en ciertos argumentos en varios comandos, como se demostr\u00f3 por los argumentos del interfaz en los comandos (1) ifconfig y (2) ping."}], "id": "CVE-2007-1836", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-03T00:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/34537"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/24666"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2516"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/464085/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23182"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33291"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/34537"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24666"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2516"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/464085/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/23182"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33291"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}