Showing 1 - 1 of 1

CVE-2014-2527

Status Candidate

Overview

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.

Related Files

Gentoo Linux Security Advisory 201406-15: Posted Jun 16, 2014; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 201406-15 - A vulnerability in KDirStat could allow local attackers to execute arbitrary shell commands. Versions less than 2.7.5 are affected.; tags | advisory, arbitrary, shell, local; systems | linux, gentoo; advisories | CVE-2014-2527; SHA-256 | 0cd26004decec0355c19d117cabe258fe1ce10e9d050e2db5dcd0177c1acda41; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 282 files
Jay Turla 150 files
indoushka 149 files
Ubuntu 69 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
Gentoo 31 files
H D Moore 31 files
Debian 30 files

File Archives

Systems

AIX (429)
Apple (2,104)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,117)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (880)
iOS (387)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,059)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,725)
Slackware (941)
Solaris (1,614)
SUSE (1,444)
Ubuntu (9,806)
UNIX (9,449)
UnixWare (187)
Windows (6,762)
Other

CVE-2014-2527

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems