newsbeuter shell characters vulnerability
Published:		24.09.2008
Source:		BUGTRAQ
SecurityVulns ID:		9307
Type:		remote
Level:		5/10
Description:		Shell characters vulnerability on "open-in-browser" command.

Affected:		NEWSBEUTER : newsbeuter 1.0
CVE:		CVE-2008-3907 (The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.)

Original document

GENTOO, [ GLSA 200809-12 ] Newsbeuter: User-assisted execution of arbitrary code (24.09.2008)

Discuss:

Read or add your comments to this news (0 comments)