The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kopete | Kde | 0.6.1 (including) | 0.6.1 (including) |
References
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000665
- http://kopete.kde.org/index.php?page=newsstory\u0026news=Kopete_releases_version_0.6.2
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:055
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000665
- http://kopete.kde.org/index.php?page=newsstory\u0026news=Kopete_releases_version_0.6.2
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:055