CVE-2006-2548

Published: May 23, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.

Affected (5)

Products: Perlpodder: Perlpodder · Prodder: Prodder

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Perlpodder Perlpodder	Up to 0.4
Perlpodder Perlpodder	Version 0.2
Perlpodder Perlpodder	Version 0.3
Prodder Prodder	Up to 0.4
Prodder Prodder	Version 0.3

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (26)

http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html

Source: cve@mitre.org

http://secunia.com/advisories/20208

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20238

Source: cve@mitre.org

http://securityreason.com/securityalert/942

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643

Source: cve@mitre.org

Patch

http://www.osvdb.org/25690

Source: cve@mitre.org

http://www.redteam-pentesting.de/advisories/rt-sa-2006-002.php

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.redteam-pentesting.de/advisories/rt-sa-2006-003.php

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/archive/1/434712/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18068

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2006/1905

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26568

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26575

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html