5 matches found
Design/Logic Flaw
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
CVE-2014-9938
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution...
PT-2017-6411
Name of the Vulnerable Software and Affected Versions Git versions prior to 1.9.3 Description The issue allows a malicious repository to cause code execution due to unsanitized branch names in the PS1 variable. Recommendations For versions prior to 1.9.3, update to version 1.9.3 or later to resol...
CVE-1999-1383: Undefined Security Weakness
1 bash before 1.14.7, and 2 tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters back-tick, which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable...