----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
GIT "gitweb" Command Injection Vulnerabilities

SECUNIA ADVISORY ID:
SA33607

VERIFY ADVISORY:
http://secunia.com/advisories/33607/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
GIT 1.x
http://secunia.com/advisories/product/7172/

DESCRIPTION:
Some vulnerabilities have been reported in GIT, which can be
exploited by malicious people to potentially compromise a vulnerable
system.

The vulnerabilities are caused due to the "git_search()",
"git_cmd()", "git_snapshot()", and "git_object()" functions in
gitweb/gitweb.pl not properly sanitising certain parameters before
using them in a call to e.g. "open()", which can be exploited to
inject and execute arbitrary shell commands by sending specially
crafted requests to the interface.

SOLUTION:
Update to version 1.5.6.6 or 1.6.1.

PROVIDED AND/OR DISCOVERED BY:
Sebastian Krahmer, SuSE security team

ORIGINAL ADVISORY:
http://repo.or.cz/w/git.git?a=commitdiff;h=c582abae
http://repo.or.cz/w/git.git?a=commitdiff;h=516381d5

OTHER REFERENCES:
https://bugzilla.redhat.com/show_bug.cgi?id=479715

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------