Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
References
Configurations
History
07 Nov 2023, 02:37
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
28 Jan 2021, 18:11
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
|
References | (MLIST) https://lists.apache.org/thread.html/r2e94f72f53df432302d359fd66cfa9e9efb8d42633d54579a4377e62@%3Cdev.avro.apache.org%3E - Mailing List, Third Party Advisory | |
References | (DEBIAN) https://www.debian.org/security/2018/dsa-4146 - Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2018/01/msg00011.html - Mailing List, Third Party Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/r9584c4304c888f651d214341a939bd264ed30c9e3d0d30fe85097ecf@%3Ccommits.pulsar.apache.org%3E - Mailing List, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2018:1322 - Third Party Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E - Mailing List, Third Party Advisory | |
References | (DEBIAN) https://www.debian.org/security/2018/dsa-4149 - Third Party Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E - Mailing List, Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2018/01/msg00010.html - Mailing List, Third Party Advisory |
27 Jan 2021, 21:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2018-01-03 20:29
Updated : 2023-12-10 12:15
NVD link : CVE-2017-1000487
Mitre link : CVE-2017-1000487
CVE.ORG link : CVE-2017-1000487
JSON object : View
Products Affected
debian
- debian_linux
plexus-utils_project
- plexus-utils
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')