• info
• discussion
• exploit
• solution
• references

SLRN Arbitrary Shell Script Execution Vulnerability

Solution:
Fixes available:


SLRN Development Team slrn 0.9.6 .2

• Debian 2.2 alpha slrn_0.9.6.2-9potato2_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/slrn _0.9.6.2-9potato2_alpha.deb


• Debian 2.2 alpha slrnpull_0.9.6.2-9potato2_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/slrn pull_0.9.6.2-9potato2_alpha.deb


• Debian 2.2 arm slrn_0.9.6.2-9potato2_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/slrn_0 .9.6.2-9potato2_arm.deb


• Debian 2.2 arm slrnpull_0.9.6.2-9potato2_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/slrnpu ll_0.9.6.2-9potato2_arm.deb


• Debian 2.2 i386 slrn_0.9.6.2-9potato2_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/slrn_ 0.9.6.2-9potato2_i386.deb


• Debian 2.2 i386 slrnpull_0.9.6.2-9potato2_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/slrnp ull_0.9.6.2-9potato2_i386.deb


• Debian 2.2 m68k slrn_0.9.6.2-9potato2_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/slrn_ 0.9.6.2-9potato2_m68k.deb


• Debian 2.2 m68k slrnpull_0.9.6.2-9potato2_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/slrnp ull_0.9.6.2-9potato2_m68k.deb


• Debian 2.2 ppc slrn_0.9.6.2-9potato2_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/sl rn_0.9.6.2-9potato2_powerpc.deb


• Debian 2.2 ppc slrnpull_0.9.6.2-9potato2_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/sl rnpull_0.9.6.2-9potato2_powerpc.deb


• Debian 2.2 sparc slrn_0.9.6.2-9potato2_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/slrn _0.9.6.2-9potato2_sparc.deb


• Debian 2.2 sparc slrnpull_0.9.6.2-9potato2_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/slrn pull_0.9.6.2-9potato2_sparc.deb