Unrated severityNVD Advisory· Published Jan 3, 2008· Updated Apr 23, 2026

CVE-2007-6610

Description

unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument. NOTE: this might only be a vulnerability when unp is invoked by a third party product.

Affected products

Debian/Unp
cpe:2.3:a:debian:unp:*:*:*:*:*:*:*:*
Range: <=1.0.12

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/28282nvdVendor Advisory
secunia.com/advisories/28388nvdVendor Advisory
bugs.debian.org/cgi-bin/bugreport.cginvd
bugs.gentoo.org/show_bug.cginvd
osvdb.org/42759nvd
security.gentoo.org/glsa/glsa-200801-01.xmlnvd
www.securityfocus.com/bid/27182nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000