Description
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
References
- docview-httpd-command-execution(6854) vdb-entry
- CSSA-2001-026.0 vendor-advisory
- 3052 vdb-entry