FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

konversation -- shell script command injection

Affected packages
		konversation	<	0.15

Details

VuXML ID	5c7bb4dd-6a56-11d9-97ec-000c6e8f12ef
Discovery	2005-01-19
Entry	2005-01-19
Modified	2005-01-21

Konversation comes with Perl scripts that do not properly escape shell characters on executing a script. This makes it possible to attack Konversation with shell script command injection.

References

CVE Name	CVE-2005-0129
CVE Name	CVE-2005-0130
CVE Name	CVE-2005-0131
Message	200501191739.56585.wouter@coekaerts.be