CVE-2009-4015

Lintian 1.23.x-1.23.28, 1.24.x-1.24.2.1, 2.x < 2.3.2 - Remote Command Execution via Filename Shell Metacharacters

Title source: llm
STIX 2.1

Description

Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitrary commands via shell metacharacters in filename arguments.

References (9)

Core 9
Core References
Various Sources mailing-list x_refsource_mlist
http://packages.qa.debian.org/l/lintian/news/20100128T015554Z.html
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37975
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-891-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38379
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38375
Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-1979

Scores

EPSS 0.0390
EPSS Percentile 89.2%

Details

CWE
CWE-89
Status published
Products (50)
debian/lintian 1.23.0
debian/lintian 1.23.1
debian/lintian 1.23.2
debian/lintian 1.23.3
debian/lintian 1.23.4
debian/lintian 1.23.5
debian/lintian 1.23.6
debian/lintian 1.23.7
debian/lintian 1.23.8
debian/lintian 1.23.9
... and 40 more
Published Feb 02, 2010
Tracked Since Feb 18, 2026