UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Link | Tags |
---|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448 | third party advisory |
https://security-tracker.debian.org/tracker/CVE-2008-7315/ | third party advisory |
http://www.securityfocus.com/bid/77031/info | vdb entry third party advisory |
https://rt.cpan.org/Public/Bug/Display.html?id=107364 | vendor advisory |
http://www.openwall.com/lists/oss-security/2015/10/08/6 | third party advisory mailing list |