CVE-2009-4015: SQL Injection
Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allows remote attackers to execute arbitrary commands via shell metacharacters in filename arguments.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4015?
CVE-2009-4015 is classified as a medium severity vulnerability due to the potential for arbitrary command execution by remote attackers.
How do I fix CVE-2009-4015?
To fix CVE-2009-4015, update Lintian to version 2.3.2 or later to mitigate the risk of command execution.
What versions of Lintian are affected by CVE-2009-4015?
CVE-2009-4015 affects Lintian versions 1.23.0 through 1.23.28, 1.24.0 through 1.24.2.1 and all versions prior to 2.3.2.
What types of attacks can exploit CVE-2009-4015?
CVE-2009-4015 can be exploited by attackers via specially crafted filename arguments containing shell metacharacters.
Is there a workaround for CVE-2009-4015 if I cannot update immediately?
Currently, there are no known workarounds for CVE-2009-4015 other than applying the necessary updates.