Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
diatheke: insufficient input sanitizing
| Package(s): | diatheke | CVE #(s): | CVE-2008-0932 | ||||||||||||
| Created: | February 26, 2008 | Updated: | March 4, 2008 | ||||||||||||
| Description: | From the Debian advisory: Dan Dennison discovered that Diatheke, a CGI program to make a bible website, performs insufficient sanitizing of a parameter, allowing a remote attacker to execute arbitrary shell commands as the web server user. | ||||||||||||||
| Alerts: |
| ||||||||||||||
(Log in to post comments)