gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Git | Git | 1.4.3.1 (including) | 1.4.3.1 (including) |
Git | Git | 1.4.3.2 (including) | 1.4.3.2 (including) |
Git | Git | 1.4.3.3 (including) | 1.4.3.3 (including) |
Git | Git | 1.4.3.4 (including) | 1.4.3.4 (including) |
Git | Git | 1.4.3.5 (including) | 1.4.3.5 (including) |
Git | Git | 1.4.4 (including) | 1.4.4 (including) |
Git | Git | 1.4.4.1 (including) | 1.4.4.1 (including) |
Git | Git | 1.4.4.2 (including) | 1.4.4.2 (including) |
Git | Git | 1.4.4.3 (including) | 1.4.4.3 (including) |
Git | Git | 1.4.4.4 (including) | 1.4.4.4 (including) |
Git | Git | 1.5.0 (including) | 1.5.0 (including) |
Git | Git | 1.5.0-rc2 (including) | 1.5.0-rc2 (including) |
Git | Git | 1.5.0-rc3 (including) | 1.5.0-rc3 (including) |
Git | Git | 1.5.0-rc4 (including) | 1.5.0-rc4 (including) |
Git | Git | 1.5.0.1 (including) | 1.5.0.1 (including) |
Git | Git | 1.5.0.2 (including) | 1.5.0.2 (including) |
Git | Git | 1.5.0.3 (including) | 1.5.0.3 (including) |
Git | Git | 1.5.0.4 (including) | 1.5.0.4 (including) |
Git | Git | 1.5.0.5 (including) | 1.5.0.5 (including) |
Git | Git | 1.5.0.6 (including) | 1.5.0.6 (including) |
Git | Git | 1.5.0.7 (including) | 1.5.0.7 (including) |
Git | Git | 1.5.1 (including) | 1.5.1 (including) |
Git | Git | 1.5.1.1 (including) | 1.5.1.1 (including) |
Git | Git | 1.5.1.2 (including) | 1.5.1.2 (including) |
Git | Git | 1.5.1.3 (including) | 1.5.1.3 (including) |
Git | Git | 1.5.1.4 (including) | 1.5.1.4 (including) |
Git | Git | 1.5.1.5 (including) | 1.5.1.5 (including) |
Git | Git | 1.5.1.6 (including) | 1.5.1.6 (including) |
Git | Git | 1.5.2 (including) | 1.5.2 (including) |
Git | Git | 1.5.2.1 (including) | 1.5.2.1 (including) |
Git | Git | 1.5.2.2 (including) | 1.5.2.2 (including) |
Git | Git | 1.5.2.3 (including) | 1.5.2.3 (including) |
Git | Git | 1.5.2.4 (including) | 1.5.2.4 (including) |
Git | Git | 1.5.2.5 (including) | 1.5.2.5 (including) |
Git | Git | 1.5.3 (including) | 1.5.3 (including) |
Git | Git | 1.5.3-rc4 (including) | 1.5.3-rc4 (including) |
Git | Git | 1.5.3-rc5 (including) | 1.5.3-rc5 (including) |
Git | Git | 1.5.3-rc7 (including) | 1.5.3-rc7 (including) |
Git | Git | 1.5.3.1 (including) | 1.5.3.1 (including) |
Git | Git | 1.5.3.2 (including) | 1.5.3.2 (including) |
Git | Git | 1.5.3.3 (including) | 1.5.3.3 (including) |
Git | Git | 1.5.3.4 (including) | 1.5.3.4 (including) |
Git | Git | 1.5.3.5 (including) | 1.5.3.5 (including) |
Git | Git | 1.5.3.6 (including) | 1.5.3.6 (including) |
Git | Git | 1.5.3.7 (including) | 1.5.3.7 (including) |
Git | Git | 1.5.3.8 (including) | 1.5.3.8 (including) |
Git | Git | 1.5.4 (including) | 1.5.4 (including) |
Git | Git | 1.5.4-rc0 (including) | 1.5.4-rc0 (including) |
Git | Git | 1.5.4-rc1 (including) | 1.5.4-rc1 (including) |
Git | Git | 1.5.4-rc1.1136.g2794 (including) | 1.5.4-rc1.1136.g2794 (including) |
Git | Git | 1.5.4-rc2 (including) | 1.5.4-rc2 (including) |
Git | Git | 1.5.4-rc3 (including) | 1.5.4-rc3 (including) |
Git | Git | 1.5.4-rc4 (including) | 1.5.4-rc4 (including) |
Git | Git | 1.5.4-rc5 (including) | 1.5.4-rc5 (including) |
Git | Git | 1.5.4.1 (including) | 1.5.4.1 (including) |
Git | Git | 1.5.4.2 (including) | 1.5.4.2 (including) |
Git | Git | 1.5.4.3 (including) | 1.5.4.3 (including) |
Git | Git | 1.5.4.4 (including) | 1.5.4.4 (including) |
Git | Git | 1.5.4.5 (including) | 1.5.4.5 (including) |
Git | Git | 1.5.4.6 (including) | 1.5.4.6 (including) |
Git | Git | 1.5.5 (including) | 1.5.5 (including) |
Git | Git | 1.5.5-rc1 (including) | 1.5.5-rc1 (including) |
Git | Git | 1.5.5-rc2 (including) | 1.5.5-rc2 (including) |
Git | Git | 1.5.5-rc3 (including) | 1.5.5-rc3 (including) |
Git | Git | 1.5.5.1 (including) | 1.5.5.1 (including) |
Git | Git | 1.5.5.2 (including) | 1.5.5.2 (including) |
Git | Git | 1.5.5.3 (including) | 1.5.5.3 (including) |
Git | Git | 1.5.5.3-r1 (including) | 1.5.5.3-r1 (including) |
Git | Git | 1.5.5.4 (including) | 1.5.5.4 (including) |
Git | Git | 1.5.5.5 (including) | 1.5.5.5 (including) |
Git | Git | 1.5.6 (including) | 1.5.6 (including) |
Git | Git | 1.5.6.1 (including) | 1.5.6.1 (including) |
Git | Git | 1.5.6.2 (including) | 1.5.6.2 (including) |
Git | Git | 1.5.6.3 (including) | 1.5.6.3 (including) |
Git | Git | 1.5.6.4 (including) | 1.5.6.4 (including) |
Git | Git | 1.5.6.5 (including) | 1.5.6.5 (including) |
Git | Git | 1.6.0 (including) | 1.6.0 (including) |
Git | Git | 1.6.0-rc1 (including) | 1.6.0-rc1 (including) |
Git | Git | 1.6.0-rc2 (including) | 1.6.0-rc2 (including) |
Git | Git | 1.6.0-rc3 (including) | 1.6.0-rc3 (including) |
Git | Git | 1.6.0.1 (including) | 1.6.0.1 (including) |
Git | Git | 1.6.0.2 (including) | 1.6.0.2 (including) |
Git | Git | 1.6.0.3 (including) | 1.6.0.3 (including) |
Git | Git | 1.6.0.4 (including) | 1.6.0.4 (including) |
Git | Git | 1.6.0.5 (including) | 1.6.0.5 (including) |
Git-core | Ubuntu | devel | * |
Git-core | Ubuntu | hardy | * |
Git-core | Ubuntu | intrepid | * |
Git-core | Ubuntu | upstream | * |