Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ingo1: missing input sanitizing

Package(s):

ingo1

CVE #(s):

CVE-2006-5449

Created:

November 3, 2006

Updated:

November 27, 2006

Description:

It was discovered that the Ingo email filter rules manager performs insufficient escaping of user-provided data in created procmail rules files, which allows the execution of arbitrary shell commands.

Alerts:

Gentoo	200611-22	2006-11-27
Debian	DSA-1204-1	2006-11-02

(Log in to post comments)