CVE-2001-0956 speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.
HighCVSS 7.2
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| speechio speechd | <= 0.54 | No fix listed |
References
- 20010911 security alert: speechd from speechio.org exploit mailing-list patch
- 3326 exploit patch vdb-entry vendor-advisory
- www.speechio.org vendor-advisory
- speechd-execute-commands(7121) vdb-entry