This bug was fixed in the package libphp-snoopy - 1.2.3-2ubuntu0.1
---------------
libphp-snoopy (1.2.3-2ubuntu0.1) intrepid-security; urgency=low
* SECURITY UPDATE: execute arbitrary commands via shell metacharacters in
https URLs (LP: #292923)
- changed Snoopy.class.php with patch from version 1.2.4 in ubuntu jaunty
- CVE-2008-4796
-- Vincenzo Ampolo <[email protected]> Sat, 28 Feb 2009
16:48:59 +0100
** Changed in: libphp-snoopy (Ubuntu Intrepid)
Status: Fix Committed => Fix Released
--
CVE-2008-4796: missing input sanitising
https://bugs.launchpad.net/bugs/292923
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs