Description
perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executed when saving the URL to a log file. NOTE: the wget vector is already covered by CVE-2006-2548.
References
- perlpodder-dlset-command-execution(26575) vdb-entry
- 20060522 Perlpodder Remote Arbitrary Command Execution mailing-list
- 20060522 Perlpodder Remote Arbitrary Command Execution mailing-list
- ADV-2006-1906 vdb-entry
- 20238 third-party-advisory
- http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php
- 18067 vdb-entry
- 25708 vdb-entry