Lucene search
+L

1 matches found

ArchLinux
ArchLinux
added 2015/03/24 12:0 a.m.51 views

util-linux: command injection

There is a command injection inside blkid. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the UUID, LABEL etc it finds on certain devices. However, it does not strip " character, so it can be confused to build variable names containing embedded shell metas, whic...

6.1CVSS1.3AI score0.00642EPSS
SaveExploits0References3
Rows per page
Query Builder