CVE-2010-0394

The CVE concerns trac-git (Trac Git plugin) where PyGIT.py allows remote code execution by passing shell metacharacters in a crafted HTTP query to generate a git command. Affected: Debian/Ubuntu packaging of trac-git prior to 0.0.20080710-3+lenny1 (and prior to 0.0.20090320-1 in newer releases); ...