HTTP: Redmine SCM Repository Arbitrary Command Execution

This signature detects attempts to exploit a known vulnerability against Redmine SCM Repository. A successful attack can lead to arbitrary code execution.

Extended Description

Redmine is prone to an information-disclosure vulnerability, an HTML-injection vulnerability, and a command-injection vulnerability. Exploiting these issues could allow an attacker to gain access to potentially sensitive information, inject arbitrary HTML code into the application, steal cookie-based authentication credentials, and execute arbitrary commands in the context of the webserver. Redmine versions prior to 1.0.5 are vulnerable.

Affected Products

Debian linux

References

BugTraq: 45571

CVE: CVE-2011-4929

URL: http://www.redmine.org/news/49 http://www.redmine.org/

Short Name

HTTP:EXPLOIT:REDMINE-CMD-EXEC

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Redmine SCM Repository Arbitrary Command Execution

Extended Description

Affected Products

References

Found a potential security threat?