Description
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.
References
- 3658 vdb-entry
- DSA-092 vendor-advisory
- wmtv-execute-commands(7669) vdb-entry