Debian/unp: unknown

unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename ar

Action: Upgrade unp to 1.0.13 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-6610#Debian:14/unp
• https://security-tracker.debian.org/tracker/CVE-2007-6610

published 2008-01-03T20:46:00Z · modified 2026-10-21T17:47:38.606818797Z · JSON