pfSense pfBlockerNG Host Header Command Injection

This strike exploits a command injection vulnerability in Netgate pfSense pfBlockerNG. This vulnerability is due to improper input validation for the Host HTTP header. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in OS command injection in the context of root.