Minimalist Unspecified Remote Command Execution Vulnerability

Bugtraq ID:	9049
Class:	Input Validation Error
CVE:	CVE-2003-0902
Remote:	Yes
Local:	No
Published:	Nov 17 2003 12:00AM
Updated:	Jul 12 2009 12:56AM
Credit:	Announced in a Debian advisory.
Vulnerable:	Minimalist Minimalist 2.2 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0
Not Vulnerable:

Minimalist Unspecified Remote Command Execution Vulnerability

Minimalist has been reported to be prone to an unspecified input validation issue. This vulnerability could be exploited to execute arbitrary commands on the system running minimalist.

This BID will be updated if and when more details about this vulnerability become available.

Minimalist Unspecified Remote Command Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Minimalist Unspecified Remote Command Execution Vulnerability

Solution:
Debian has released an advisory (DSA 402-1) and fixes for this issue. See the referenced advisory for links to updated packages.


Minimalist Minimalist 2.2

• Debian minimalist_2.2-4_all.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/m/minimalist/minimalist_2 .2-4_all.deb

Minimalist Unspecified Remote Command Execution Vulnerability

References:

• Minimalist Home Page (Minimalist)