Vulnerability in C.j. Steele Tattle
CVE-2005-1960
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.
EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.
Affected products
- C.j._steele Tattle
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)