CVE-2006-1865

Published: Apr 21, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing.

Affected (1)

Products: Beagle Project: Beagle

Beagle Project

1 product

Beagle

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Beagle Project Beagle	Before 0.2.5

Related CWEs

CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

References (20)

http://lists.seifried.org/pipermail/security/2006-April/013163.html

Source: cve@mitre.org

Broken Link

http://scary.beasts.org/security/CESA-2006-002.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/19778

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/19781

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/19897

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.novell.com/linux/security/advisories/2006_04_28.html

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/24938

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/17611

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189282

Source: cve@mitre.org

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/26104

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://lists.seifried.org/pipermail/security/2006-April/013163.html