Security Advisory
CVE-2011-1572
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.