CVE-2009-4015

2022-10-0316:24:02

Debian Security Bug Tracker

security-tracker.debian.org

lintian

remote attackers

command execution

shell metacharacters

filename arguments

unix

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.6%

JSON

Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitrary commands via shell metacharacters in filename arguments.

OSVersionArchitecturePackageVersionFilename
Debian12alllintian< 2.3.2lintian_2.3.2_all.deb
Debian11alllintian< 2.3.2lintian_2.3.2_all.deb
Debian999alllintian< 2.3.2lintian_2.3.2_all.deb
Debian13alllintian< 2.3.2lintian_2.3.2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	lintian	< 2.3.2	lintian_2.3.2_all.deb
Debian	11	all	lintian	< 2.3.2	lintian_2.3.2_all.deb
Debian	999	all	lintian	< 2.3.2	lintian_2.3.2_all.deb
Debian	13	all	lintian	< 2.3.2	lintian_2.3.2_all.deb