Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

changetrack: shell command execution

Package(s):

changetrack

CVE #(s):

CVE-2009-3233

Created:

September 22, 2009

Updated:

September 23, 2009

Description:

From the Debian advisory: Marek Grzybowski discovered that changetrack, a program to monitor changes to (configuration) files, is prone to shell command injection via metacharacters in filenames. The behaviour of the program has been adjusted to reject all filenames with metacharacters.

Alerts:

Debian

DSA-1891-1

2009-09-22

(Log in to post comments)