yarssr RSS reader shell characters vulnerability
Published:		29.01.2008
Source:
SecurityVulns ID:		8617
Type:		client
Level:		5/10

Affected:		YARSSR : yarssr 0.2
CVE:		CVE-2007-5837 (GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.)

Original document

DEBIAN, [SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution (29.01.2008)

Discuss:

Read or add your comments to this news (0 comments)