Summary
The 'vpasswd.cgi' CGI is installed. Some versions
do not properly check for special characters and allow a cracker to execute any command on your system.
*** Warning : OVS solely relied on the presence of this CGI, it did not *** determine if you specific version is vulnerable to that problem
Solution
remove it from /cgi-bin.
