CVE-2007-0246

Publication date 29 May 2007

Last updated 17 July 2025

Ubuntu priority

Description

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gforge-plugin-scmcvs	8.04 LTS hardy	Not in release
	7.10 gutsy	Not affected
	7.04 feisty	Ignored end of life, was needed
	6.10 edgy	Not in release
	6.06 LTS dapper	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2007-0246