CVE-2006-1865

Description

Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing.

How to fix CVE-2006-1865

To remediate CVE-2006-1865, upgrade the affected package to a fixed version below.

• Debian/beagle—upgrade to 0.2.6-2 or later

Is CVE-2006-1865 being exploited?

Low — EPSS is 3.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.2.6-2

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2006-1865