CVE-2010-0394 PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via s...
MediumCVSS 6.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nanosleep trac-git | <= 0.0.20080710 | No fix listed |
| nanosleep trac-git | <= 0.0.20090320 | No fix listed |
References
- bugs.debian.org
- 62147 vdb-entry
- 38325 third-party-advisory vendor-advisory
- DSA-1990 vendor-advisory
- 38076 vdb-entry
- tracgit-command-execution(56105) vdb-entry