mint-search-apt : Shell Code injection
Bug #1527891 reported by
Bernd Dietzel
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Linux Mint |
Fix Committed
|
Undecided
|
Unassigned |
Bug Description
https:/
Demo :
in a terminal type in
mint-search-apt "gimp;xeyes"
this will start xeyes but should not.
LinuxMint uses insecure api calls in may python scripts, this is ony one of many.
https:/
To post a comment you must log in.
https:/ /github. com/linuxmint/ mintinstall/ commit/ 8962d994045b72a 5d55a54467729eb 7688ab2c82