Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Debian 7 LTS: DLA-1063-1 Critical Command Injection in Extplorer

debian lts
Calendar Grey August 21, 2017
Scroller Debian Lts
Critical security patch released for Debian 7 targeting remote code execution vulnerability, users advised to upgrade software immediately.
CVE-2017-12756 Fix command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the
Topics%20covered

Topics Covered

security advisory debian critical severity command injection extplorer

Summary

CVE-2017-12756
Fix command inject in transfer from another server in extplorer
2.1.9 and prior allows attacker to inject command via the
userfile[0] parameter.


For Debian 7 "Wheezy", these problems have been fixed in version
2.1.0b6+dfsg.3-4+deb7u5.

We recommend that you upgrade your extplorer packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS




Severity
critical
Lowest
Low
Medium
High
Critical

Package: extplorer
Version: 2.1.0b6+dfsg.3-4+deb7u5
CVE ID: CVE-2017-12756

Topics%20covered

Topics Covered

security advisory debian critical severity command injection extplorer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.