Ubuntu
python2.7 package

Bug #1514183
Comment #1

Comment 1 for bug 1514183

Revision history for this message

Bernd Dietzel (l-ubuntuone1104) wrote on 2015-11-08: Re: distutils : filebdist_rpm.py allows Shell injection in "name"

#1

Exploit demo setup.py script with a Shell command in "name" Edit (537 bytes, text/x-python)
Dependencies.txt Edit (1.1 KiB, text/plain; charset="utf-8")
JournalErrors.txt Edit (21.1 KiB, text/plain; charset="utf-8")
ProcEnviron.txt Edit (112 bytes, text/plain; charset="utf-8")