packetstormsecurity.com
http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html CVE-2013-6881
Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities
Record summary
CVE-2013-6881 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDitto Forensic FieldStation 2013Oct15a - Multiple VulnerabilitiesExploitDB exploitby Martin WundramNot analyzed1 file
References
720131212 Ditto Forensic FieldStation, multiple vulnerabilitiesmailing list
http://seclists.org/fulldisclosure/2013/Dec/80 55989Third-party advisory
http://secunia.com/advisories/55989 cru-inc.com
http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a cru-inc.com
http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a 30396exploit
http://www.exploit-db.com/exploits/30396 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-6881