AOLServer is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. AOLServer 4.5.1 is vulnerable other versions may also be affected.

• http://www.aolserver.com/
• http://www.securityfocus.com/archive/1/508830
• http://www.securityfocus.com/bid/37712

---

Updated on 2015-03-25