CVE:CVE-2008-3907
CNNVD:CNNVD-200809-059
Newsbeuter 是一款专门为文本终端界面而设计的RSS 阅读工具。
newsbeuter 1.1之前的版本中的open-in-browser指令允许远程攻击者通过一个feed URL的外壳元字符来执行任意指令。
solution:Upgrade newsbeuter newsbeuter to a higher version than 1.0,0.1.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.8.1,0.8.2,0.9,0.9.1,and avoid the version (,1.0],0.1.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.8.1,0.8.2,0.9,0.9.1