Mailing List Archive

MiniShare 1.4.1 and prior versions are affected by a buffer overflow flaw.

A remote attacker could execute arbitrary commands by sending a specially

crafted file name in a the GET request.



References:

- http://www.osvdb.org/11530

- http://www.securityfocus.com/bid/11620



Kind regards

Gareth



gareth@sensepost.com

www.sensepost.com