CVE-2008-5718
- State
- Published
- Severity
- Not scored
- Published
- Dec 26, 2008
- Updated
- Aug 7, 2024
- Reserved
- Dec 26, 2008
Description
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://sourceforge.net/project/shownotes.php?release_id=648189
- DSA-1705vendor-advisory
- 34484third-party-advisory
- FEDORA-2009-3064vendor-advisory
- FEDORA-2009-3069vendor-advisory
- 33548third-party-advisory
- 33227third-party-advisory
- SUSE-SR:2009:004vendor-advisory
- 50824vdb-entry
- 32925vdb-entry
- [oss-security] 20090114 update on CVE-2008-5718mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.