CVE-2010-2892

gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the DRIVES parameter, as demonstrated by a cross-site request forgery (CSRF) attack.

• CWE-20

• http://community.landesk.com/support/docs/DOC-21767Vendor Advisory
• http://secunia.com/advisories/42188Vendor Advisory
• http://securitytracker.com/id?1024728
• http://www.coresecurity.com/content/landesk-os-command-injection-vulnerabilityExploit
• http://www.exploit-db.com/exploits/15488Exploit
• http://www.securityfocus.com/archive/1/514728/100/0/threaded
• http://www.securityfocus.com/bid/44781Exploit
• http://www.vupen.com/english/advisories/2010/2957Vendor Advisory
• http://community.landesk.com/support/docs/DOC-21767Vendor Advisory
• http://secunia.com/advisories/42188Vendor Advisory
• http://securitytracker.com/id?1024728
• http://www.coresecurity.com/content/landesk-os-command-injection-vulnerabilityExploit
• http://www.exploit-db.com/exploits/15488Exploit
• http://www.securityfocus.com/archive/1/514728/100/0/threaded
• http://www.securityfocus.com/bid/44781Exploit
• http://www.vupen.com/english/advisories/2010/2957Vendor Advisory

Published

Nov 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2886Multiple cross-site scripting (XSS) vulnerabilities in Adobe…
• CVE-2010-2887Multiple unspecified vulnerabilities in Adobe Reader and Acr…
• CVE-2010-2888Multiple unspecified vulnerabilities in an ActiveX control i…
• CVE-2010-2889Unspecified vulnerability in Adobe Reader and Acrobat 9.x be…
• CVE-2010-2890Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.…
• CVE-2010-2891Buffer overflow in the smiGetNode function in lib/smi.c in l…
• CVE-2010-2896IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.…
• CVE-2010-2897Google Chrome before 5.0.375.125 does not properly mitigate …
• CVE-2010-2898Google Chrome before 5.0.375.125 does not properly mitigate …
• CVE-2010-2899Unspecified vulnerability in the layout implementation in Go…
• CVE-2010-2900Google Chrome before 5.0.375.125 does not properly handle a …
• CVE-2010-2901The rendering implementation in Google Chrome before 5.0.375…