Netsweeper WebAdmin unixlogin.php Python Code Injection

Netsweeper offers real-time content tracking and notification for early intervention. Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.

Mitigation / Precaution

If you are affected by this CVE, you can automatically upgrade the application to the latest edition, or at the very least to 1.5.2.

Written by

Anandhu K A

Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission