F
FreeBSD Security
Guest
Due to insufficient sanitization of the input patch stream, it is possible for a patch file to cause patch(1) to run commands in addition to the desired SCCS or RCS commands.
Continue reading...
Last edited by a moderator: