CVE-2008-6555: Puppetmaster Webutil

High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days.

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command.

Affected products

• Puppetmaster Webutil: version 2.3 only; version 2.7 only

Published 2009-03-30. Last modified 2026-06-16.