CVE-2009-3233

The CVE-2009-3233 entry concerns changetrack 4.3, where local users could execute arbitrary commands via CRLF sequences and shell metacharacters found in a filename within a directory that changetrack checks. The underlying issue is shell command injection through filenames containing metacharact...