Description
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.
References
- 32464 vdb-entry
- 32832 third-party-advisory
- 50284 vdb-entry
- yast2backup-backup-command-execution(46879) vdb-entry
- SUSE-SA:2008:054 vendor-advisory