• info
• discussion
• exploit
• solution
• references

Gnatsweb Remote Command Execution Vulnerability

Solution:
Patches are available.


GNU Gnatsweb 2.7 beta

• Gnu gw27bfileopen.diff
  http://sources.redhat.com/gnats/gnatsweb/patches/gw27bfileopen.diff

GNU Gnatsweb 2.8

• Gnu gw280fileopen.diff
  http://sources.redhat.com/gnats/gnatsweb/patches/gw280fileopen.diff

GNU Gnatsweb 2.8.1

• Gnu gw281fileopen.diff
  http://sources.redhat.com/gnats/gnatsweb/patches/gw281fileopen.diff