Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

otrs: arbitrary command execution

Package(s):

otrs

CVE #(s):

CVE-2011-0456

Created:

April 1, 2011

Updated:

April 6, 2011

Description:

From the openSUSE advisory:

Insufficient quoting of shell meta characters in otrs' webscript.pl could allow remote attackers to execute arbitrary commands.

Alerts:

SUSE	SUSE-SR:2011:006	2011-04-05
openSUSE	openSUSE-SU-2011:0278-1	2011-04-01

(Log in to post comments)