CVE-2018-16741 An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the...
HighCVSS 7.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or > characters within a file created by the "faxq-helper activate <jobid>" command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mgetty(Debian:12) | < 1.2.1-1 | 1.2.1-1 |
| debian/mgetty(Debian:13) | < 1.2.1-1 | 1.2.1-1 |
| debian/mgetty(Debian:14) | < 1.2.1-1 | 1.2.1-1 |
| mgetty project mgetty | < 1.2.1 | 1.2.1 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-16741 vendor-advisory
- [debian-lts-announce] 20180912 [SECURITY] [DLA 1502-1] mgetty security update mailing-list third-party-advisory
- DSA-4291 third-party-advisory vendor-advisory
- www.x41-dsec.de exploit third-party-advisory
- bugs.debian.org issue-tracking