CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

Dulwich Arbitrary Command Execution Vulnerability

Dulwich is a Python implementation of the file format and protocols of the Git version control system developed by software developer Jelmer Vernooij. A security vulnerability exists in versions of Dulwich prior to 0.18.5. The vulnerability can be exploited by a remote attacker to execute arbitra...

Arbitrary Command Execution

Dulwich is vulnerable to arbitrary command execution. When using the SSH subprocess, an attacker can use an ssh URL with the - dash character in the hostname.This is related to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

Design/Logic Flaw

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

PYSEC-2017-12

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

PYSEC-2017-12

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

DEBIAN-CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

UBUNTU-CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-16228

Summary (CVE-2017-16228) : Dulwich up to version 0.18.5 is vulnerable when an SSH subprocess is used and an ssh URL with an initial dash in the hostname is processed, allowing remote command execution. The issue stems from inadequate validation of ssh URLs, enabling an attacker-controlled hostnam...

CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

PT-2017-14358

Name of the Vulnerable Software and Affected Versions Dulwich affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname. Recommendations At the moment, there is no information about a...

dulwich-suzhou.cn XSS vulnerability

Vulnerable URL: http://www.dulwich-suzhou.cn/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 11:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1917056...

dulwich-shanghai.cn XSS vulnerability

Vulnerable URL: http://www.dulwich-shanghai.cn/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 17:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1830892...

dulwich-shanghai.cn Open Redirect vulnerability

Vulnerable URL: http://www.dulwich-shanghai.cn/cfnews/forward.cfm?dest=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 11:28 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

dulwich-seoul.kr XSS vulnerability

Vulnerable URL: http://www.dulwich-seoul.kr/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 16:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9168664 Goog...

dulwich-seoul.kr Open Redirect vulnerability

Vulnerable URL: http://www.dulwich-seoul.kr/cfnews/forward.cfm?dest=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 16:24 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...