Arbitrary Command Execution Vulnerability in Novell Filr

CVE-2016-1608 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter.

Learn more about our Cis Benchmark Audit For Server Software.