gitolite: arbitrary code execution
| Package(s): | gitolite | CVE #(s): | |||||||||
| Created: | February 22, 2011 | Updated: | April 11, 2011 | ||||||||
| Description: | From the Fedora advisory:
Dylan Alex Simon discovered and reported a directory traversal flaw in the way Gitolite restricted access to admin defined commands ("ADC"). An authenticated attacker could execute arbitrary code with privileges of Gitolite server user using specially crafted command name. | ||||||||||
| Alerts: |
| ||||||||||