Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2008-1467

Published: 24 March 2008

** DISPUTED ** CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to "received URLs in the message window." NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by the victim.

Notes

AuthorNote
jdstrand
per Debian, the victim needs to list the URLs in the message with F2
and press enter on it. the victim can see the complete URL including the
commands however so the impact is really low

Priority

Low

Status

Package Release Status
centericq
Launchpad, Ubuntu, Debian
dapper Ignored
(end of life)
edgy Ignored
(end of life, was needed)
feisty Ignored
(end of life, was needed)
gutsy Does not exist

hardy Does not exist

intrepid Does not exist

jaunty Does not exist

karmic Does not exist

upstream Needed

centerim
Launchpad, Ubuntu, Debian
dapper Does not exist

edgy Does not exist

feisty Does not exist

gutsy Ignored
(end of life, was needed)
hardy
Released (4.22.2-1ubuntu2)
intrepid
Released (4.22.2-1ubuntu2)
jaunty
Released (4.22.2-1ubuntu2)
karmic
Released (4.22.2-1ubuntu2)
upstream Needed