Git cvsserver Remote Command Execution

Phenoelit Advisory Authors joernchen Phenoelit Group http://www.phenoelit.de Affected Products Git before 2.14.2, 2.13.6, 2.12.5, 2.11.4 and 2.10.5 git-cvsserver https://git-scm.com Vendor communication 2017-09-08 Sent vulnerability details to the git-security list 2017-09-09 Acknowledgement of t...

PT-2017-10820

Name of the Vulnerable Software and Affected Versions git versions prior to 6.20170818 git-scm git affected versions not specified Description A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exist...

PT-2009-1073 · Git · Git

Name of the Vulnerable Software and Affected Versions: git versions 1.5.x through 1.5.4 git versions prior to 1.6.0.6 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters related to git search, potentially leading to disruption of confidentiality,...