2005-01-22 05:00:00
mitre
PUBLISHED
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.