Description
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
References
- 20020102 BSCW: Vulnerabilities and Problems mailing-list
- 3776 vdb-entry
- http://bscw.gmd.de/WhatsNew.html
- bscw-remote-shell-execution(7774) vdb-entry