Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2014-2527
Description:kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
Test IDs: 1.3.6.1.4.1.25623.1.0.121218   1.3.6.1.4.1.25623.1.1.4.2014.0930.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-2527
http://www.openwall.com/lists/oss-security/2014/03/17/2
http://www.openwall.com/lists/oss-security/2014/03/18/2
SuSE Security Announcement: openSUSE-SU-2014:0984 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-08/msg00015.html




© 1998-2021 E-Soft Inc. All rights reserved.