Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

shiela:arbitrary code execution

Package(s):

shiela

CVE #(s):

CVE-2006-3633

Created:

July 25, 2006

Updated:

July 26, 2006

Description:

Brian Caswell discovered vulnerabilities in OSSP Shiela, a CVS repository access control and logging extension. The vulnerabilities allow arbitrary code execution during CVS file commits if a filename is specially crafted to contain shell commands.

Alerts:

OpenPKG

OpenPKG-SA-2006.014

2006-07-25

(Log in to post comments)