Description (CNA)
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/248000
- http://www.securityfocus.com/bid/3776
- http://bscw.gmd.de/WhatsNew.html
- http://www.iss.net/security_center/static/7774.php
ADP enrichment
No English description supplied.