Mandriva Linux Security Advisory : glibc (MDVSA-2014:232)

Updated glibc package fixes security vulnerability : The function wordexp\ fails to properly handle the WRDENOCMD flag when processing arithmetic inputs in the form of $... where ... can be anything valid. The backticks in the arithmetic epxression are evaluated by in a shell even if WRDENOCMD...

Design/Logic Flaw

The shellquote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$" command-substitution sequences, a different vulnerability than CVE-2014-1928...

SuSE Update for NRPE openSUSE-SU-2013:0624-1 (NRPE)

Check for the Version of NRPE OpenVAS Vulnerability Test $Id: gbsuse201306241.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for NRPE openSUSE-SU-2013:0624-1 NRPE Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

SuSE Update for NRPE openSUSE-SU-2013:0621-1 (NRPE)

Check for the Version of NRPE OpenVAS Vulnerability Test $Id: gbsuse201306211.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for NRPE openSUSE-SU-2013:0621-1 NRPE Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

bash_1.x.txt

Rather dangerous bug is present in output processing after "command substitution" in bash 1.xx. It seems to be NOT present in bash 2.0.x, but I haven't found any bugreport on this vulnerability. I looked for: 'command substitution', 'ff', 'subshell' and '$' CHANGES file, no effects... Seems to be...