Arbitrary Command Execution in reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1

Arbitrary Command Execution in reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1

CVE-2014-0479 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.

Learn more about our Web Application Penetration Testing UK.