CVE-2008-5718

The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.

• CWE-78

• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
• http://osvdb.org/50824
• http://secunia.com/advisories/33227Vendor Advisory
• http://secunia.com/advisories/33548Vendor Advisory
• http://secunia.com/advisories/34484Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=648189
• http://www.debian.org/security/2009/dsa-1705Patch
• http://www.openwall.com/lists/oss-security/2009/01/13/3
• http://www.securityfocus.com/bid/32925Patch
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00962.html
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00966.html
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
• http://osvdb.org/50824
• http://secunia.com/advisories/33227Vendor Advisory
• http://secunia.com/advisories/33548Vendor Advisory
• http://secunia.com/advisories/34484Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=648189
• http://www.debian.org/security/2009/dsa-1705Patch
• http://www.openwall.com/lists/oss-security/2009/01/13/3
• http://www.securityfocus.com/bid/32925Patch
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00962.html
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00966.html

Published

Dec 26, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5712The HTML parser in KDE Konqueror 3.5.9 allows remote attacke…
• CVE-2008-5713The __qdisc_run function in net/sched/sch_generic.c in the L…
• CVE-2008-5714Off-by-one error in monitor.c in Qemu 0.9.1 might make it ea…
• CVE-2008-5715Mozilla Firefox 3.0.5 on Windows Vista allows remote attacke…
• CVE-2008-5716xend in Xen 3.3.0 does not properly restrict a guest VM's wr…
• CVE-2008-5717Cross-site scripting (XSS) vulnerability in Hitachi JP1/Inte…
• CVE-2008-5719Cross-site scripting (XSS) vulnerability in Hitachi Groupmax…
• CVE-2008-5720Cross-site scripting (XSS) vulnerability in Mayaa before 1.1…
• CVE-2008-5721SapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote …
• CVE-2008-5722Buffer overflow in SAWStudio 3.9i allows user-assisted remot…
• CVE-2008-5723Directory traversal vulnerability in CGI RESCUE KanniBBS2000…
• CVE-2008-5724The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and ea…