Description
Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.
References
- http://www.opera.com/docs/changelogs/linux/851/
- SUSE-SR:2005:028 vendor-advisory
- 18111 third-party-advisory
- 199 third-party-advisory
- ADV-2005-2519 vdb-entry
- 21003 vdb-entry
- 1015253 vdb-entry
- 15521 vdb-entry
- 20051122 Secunia Research: Opera Command Line URL Shell Command Injection mailing-list
- http://secunia.com/secunia_research/2005-57/advisory/
- 16907 third-party-advisory
- GLSA-200512-10 vendor-advisory
- 20051122 Secunia Research: Opera Command Line URL Shell Command Injection mailing-list