VULHUB ™

ht://dig is a program which is shipped with Debian GNU/Linux 2.1 that is used for indexing and searching files on webservers. When it attempts to handle non-HTML files, it calls an external program with the document as a parameter - without checking for shell escapes. If files can be created with filenames containing shell escapes, it may be possible to execute aribtrary shell commands on the target webserver due to this problem, leading to a remote compromise.

ht://dig is a program which is shipped with Debian GNU/Linux 2.1 that is used for indexing and searching files on webservers. When it attempts to handle non-HTML files, it calls an external program with the document as a parameter - without checking for shell escapes. If files can be created with filenames containing shell escapes, it may be possible to execute aribtrary shell commands on the target webserver due to this problem, leading to a remote compromise.