CVE-2006-3633
OSSP shiela < 1.1.5 - Authenticated Remote Command Execution via Filename Shell Metacharacters
Title source: llmDescription
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
References (6)
Core 6
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2986
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27978
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/19199
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21209
Patch, Vendor Advisory vendor-advisory
x_refsource_openpkg
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.014-shiela.html
Patch, Vendor Advisory x_refsource_misc
http://www.sourcefire.com/services/advisories/sa072506.html
Scores
EPSS
0.0331
EPSS Percentile
87.1%
Details
CWE
CWE-20
Status
published
Products (14)
ossp/shiela
0.9.0
ossp/shiela
0.9.1
ossp/shiela
0.9.2
ossp/shiela
1.0.0
ossp/shiela
1.0.1
ossp/shiela
1.0.2
ossp/shiela
1.0.3
ossp/shiela
1.0.4
ossp/shiela
1.1.0
ossp/shiela
1.1.1
... and 4 more
Published
Jul 27, 2006
Tracked Since
Feb 18, 2026