Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Redmine | Redmine | 0.9.0 (including) | 0.9.0 (including) |
| Redmine | Redmine | 0.9.1 (including) | 0.9.1 (including) |
| Redmine | Redmine | 0.9.2 (including) | 0.9.2 (including) |
| Redmine | Redmine | 0.9.3 (including) | 0.9.3 (including) |
| Redmine | Redmine | 0.9.4 (including) | 0.9.4 (including) |
| Redmine | Redmine | 0.9.5 (including) | 0.9.5 (including) |
| Redmine | Redmine | 0.9.6 (including) | 0.9.6 (including) |
| Redmine | Redmine | 1.0.0 (including) | 1.0.0 (including) |
| Redmine | Redmine | 1.0.1 (including) | 1.0.1 (including) |
| Redmine | Redmine | 1.0.2 (including) | 1.0.2 (including) |
| Redmine | Redmine | 1.0.3 (including) | 1.0.3 (including) |
| Redmine | Redmine | 1.0.4 (including) | 1.0.4 (including) |
| Redmine | Ubuntu | lucid | * |
| Redmine | Ubuntu | maverick | * |
| Redmine | Ubuntu | upstream | * |
References
- http://www.debian.org/security/2011/dsa-2261
- http://www.openwall.com/lists/oss-security/2012/01/06/5
- http://www.openwall.com/lists/oss-security/2012/01/06/7
- http://www.redmine.org/news/49
- http://www.debian.org/security/2011/dsa-2261
- http://www.openwall.com/lists/oss-security/2012/01/06/5
- http://www.openwall.com/lists/oss-security/2012/01/06/7
- http://www.redmine.org/news/49