Security Advisory
CVE-2008-2575
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.