CVE-2007-0246

Publication date 29 May 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO.

Status

Package Ubuntu Release Status
gforge-plugin-scmcvs 8.04 LTS hardy Not in release
7.10 gutsy
Not affected
7.04 feisty Ignored end of life, was needed
6.10 edgy Not in release
6.06 LTS dapper Not in release