Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

sword: missing input sanitizing

Package(s):

sword

CVE #(s):

CAN-2005-0015

Created:

January 20, 2005

Updated:

January 26, 2005

Description:

The CGI script diatheke from sword does not properly sanitize its input, allowing arbitrary commands to be executed through a specially crafted URL.

Alerts:

Debian

2005-01-20

(Log in to post comments)