Description (CNA)
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-06/0057.html
- http://secunia.com/advisories/15582
ADP enrichment
No English description supplied.