Security Advisory

CVE-2006-2548

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-05-23 10:00:00
Last updated 2024-08-07 17:51:04
Assigner mitre
State PUBLISHED

Description

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.