CVE:CVE-2010-0418
CNNVD:CNNVD-201003-108
chumby one 和chumby classic的web界面存在操作系统命令注入漏洞。远程攻击者可以借助一个请求中的shell安全机制执行任意的命令。
solution:Upgrade chumby chumby_one to a higher version than 1.0.3,1.0.2,and avoid the version (,1.0.3],1.0.2; Upgrade chumby chumby_classic to a higher version than 1.7.1,0.9,1.1,1.2,1.4,1.5,1.6,1.7,and avoid the version (,1.7.1],0.9,1.1,1.2,1.4,1.5,1.6,1.7