Debian/fvwm: unknown

CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directory name, which is not properly

Action: Upgrade fvwm to 1:2.5.18-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-5969#Debian:13/fvwm
• https://security-tracker.debian.org/tracker/CVE-2006-5969

published 2006-11-17T23:07:00Z · modified 2026-10-22T23:47:30.185794113Z · JSON