amule shell characters vulnerability
Published:		24.06.2009
Source:		BUGTRAQ
SecurityVulns ID:		10008
Type:		client
Level:		5/10
Description:		Shell characters vulnerability on video file filename.

Affected:		AMULE : amule 2.1
CVE:		CVE-2009-1440 (Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename.)

Original document

DEBIAN, [SECURITY] [DSA 1821-1] New amule packages fix insufficient input sanitising (24.06.2009)

Discuss:

Read or add your comments to this news (0 comments)