Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

aaa_base: arbitrary command execution

Package(s):

aaa_base

CVE #(s):

CVE-2011-0468

Created:

March 22, 2011

Updated:

April 1, 2011

Description:

From the openSUSE advisory:

shell meta characters in file names could cause interactive shells to execute arbitrary commands when performing tab expansion.

Alerts:

SUSE	SUSE-SR:2011:005	2011-04-01
openSUSE	openSUSE-SU-2011:0207-1	2011-03-22

(Log in to post comments)