Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

gaim: command execution via smiley themes

Package(s):

gaim

CVE #(s):

CAN-2004-0784 CAN-2004-0785

Created:

October 21, 2004

Updated:

November 12, 2004

Description:

gaim may allow arbitrary commands to be executed via shell meta characters in the the tar file name that is dragged to the smiley selector.

Alerts:

(Log in to post comments)