Signature Detail

HTTP: Mutiny Command Injection

This signature detects attempts to exploit a known vulnerability in Mutiny. A successful attack can lead to arbitrary code execution.

Extended Description

Per: http://www.mutiny.com/products.php "Mutiny is a virtual appliance that uses industry standard SNMP to gather information from IT Infrastructure, process and display the results in a multi-user web front-end that allows administrators and managers alike to quickly asses the health of their estate."

Affected Products

• Mutiny standard 4.4-1.12
• Mutiny standard 4.5-1.03
• Mutiny standard 4.5-1.05
• Mutiny standard 4.5-1.07
• Mutiny standard 4.5-1.10

References

• BugTraq: 56165
• CVE: CVE-2012-3001
• URL: http://obscuresecurity.blogspot.com.es/2012/10/mutiny-command-injection-and-cve-2012.html