Gentoo: GLSA-200911-06 High Severity: Command Injection Threat

Gentoo Linux Security Advisory GLSA 200911-06 https://security.gentoo.org/ Severity: High Title: PEAR Net_Traceroute: Command injection Date: November 26, 2009 Bugs: #294264 ID: 200911-06

Synopsis ======= An input sanitation error in PEAR Net_Traceroute might allow remote attackers to execute arbitrary commands.
Background ========= PEAR Net_Traceroute is an OS independent wrapper class for executing traceroute calls from PHP.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-php/PEAR-Net_Traceroute < 0.21.2 >= 0.21.2
========== Pasquale Imperato reported that the $host parameter to the traceroute() function in Traceroute.php is not properly sanitized before being...