oss-sec mailing list archives
Re: CVE id request: newsbeuter
From: "Steven M. Christey" <coley () linus mitre org>
Date: Thu, 4 Sep 2008 12:22:07 -0400 (EDT)
====================================================== Name: CVE-2008-3907 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3907 Reference: MLIST:[oss-security] 20080901 CVE id request: newsbeuter Reference: URL:http://www.openwall.com/lists/oss-security/2008/09/01/4 Reference: CONFIRM:http://www.newsbeuter.org/downloads/CHANGES Reference: BID:30964 Reference: URL:http://www.securityfocus.com/bid/30964 Reference: SECUNIA:31676 Reference: URL:http://secunia.com/advisories/31676 The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.
Current thread:
- CVE id request: newsbeuter Nico Golde (Sep 01)
- Re: CVE id request: newsbeuter Nico Golde (Sep 02)
- Re: CVE id request: newsbeuter Steven M. Christey (Sep 04)
- Re: CVE id request: newsbeuter Nico Golde (Sep 04)
- Re: CVE id request: newsbeuter Steven M. Christey (Sep 04)
- Re: CVE id request: newsbeuter Nico Golde (Sep 04)
- Re: CVE id request: newsbeuter Nico Golde (Sep 04)