CVE-2012-10041

CVE-2012-10041 describes two unauthenticated command execution vulnerabilities in WAN Emulator v2.3. The result.php script allows remote attackers to execute arbitrary commands as the www-data user due to unsanitized input, and a SUID-root binary named dosu is vulnerable to command injection. This critical vulnerability, with a CVSS score of 9.3, allows an attacker to achieve full remote code execution and escalate privileges to root without authentication. Exploit code is publicly available via a Metasploit module, and the vulnerability has garnered significant community discussion, indicating a high potential for exploitation.