CVE 2008-3907

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

Related bugs and status

CVE-2008-3907 (Candidate) is related to these bugs:

Bug #275019: [CVE-2008-3907] Arbitrary code execution by crafted item URLs

		In	Importance	Status
275019	[CVE-2008-3907] Arbitrary code execution by crafted item URLs	newsbeuter (Ubuntu)	High	Fix Released
275019	[CVE-2008-3907] Arbitrary code execution by crafted item URLs	newsbeuter (Ubuntu Hardy)	High	Fix Released
275019	[CVE-2008-3907] Arbitrary code execution by crafted item URLs	newsbeuter (Ubuntu Intrepid)	High	Fix Released

See the

CVE page on Mitre.org for more details.