CVE-2006-2548

N/A Unknown

Published: May 23, 2006 Modified: April 16, 2026

Description

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html

Source: cve@mitre.org

http://secunia.com/advisories/20208

Source: cve@mitre.org

Patch Vendor Advisory

http://secunia.com/advisories/20238

Source: cve@mitre.org

http://securityreason.com/securityalert/942

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643

Source: cve@mitre.org

Patch

http://www.osvdb.org/25690

Source: cve@mitre.org

http://www.redteam-pentesting.de/advisories/rt-sa-2006-002.php

Source: cve@mitre.org

Exploit Patch Vendor Advisory

http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php

Source: cve@mitre.org

Exploit Patch Vendor Advisory

http://www.securityfocus.com/archive/1/434712/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18068

Source: cve@mitre.org

Exploit Patch

http://www.vupen.com/english/advisories/2006/1905

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26568

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26575

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html