CVE:CVE-2011-1400
CNNVD:CNNVD-201103-318
Debian是Debian Project合作组织创建的以Linux或FreeBSD为内核的自由操作系统。
Debian GNU/Linux squeeze，Ubuntu 10.10和10.04 LTS的tex-common包2.08.1之前版本中的conf/texmf.d/95NonPath.cnf中的shell_escape_commands指令的默认配置列出了某些程序。该漏洞是由于应用程序在处理tex文件时，应用程序未能正确退出shell命令导致的。远程攻击者可通过欺骗用户打开恶意特制tex文件，导致执行任意命令。
solution:Upgrade debian tex-common to a higher version than 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.10,0.11,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.19,0.20,0.21,0.22,0.23,0.24,0.25,0.26,0.27,0.28,0.29,0.30,0.31,0.32,0.33,0.34,0.35,0.36,0.37,0.38,0.39,0.40,0.41,0.42,0.43,0.44,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.9,1.10,1.11,1.11.1,1.11.2,1.11.3,1.12,1.13,1.14,1.15,1.16,1.17,1.18,1.19,1.20,2.00,2.01,2.02,2.03,2.04,2.05,2.06,2.07,2.08,and avoid the version 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.10,0.11,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.19,0.20,0.21,0.22,0.23,0.24,0.25,0.26,0.27,0.28,0.29,0.30,0.31,0.32,0.33,0.34,0.35,0.36,0.37,0.38,0.39,0.40,0.41,0.42,0.43,0.44,1.0,1.1,1.2,1.3,1.4,1.5,1.6,1.7,1.8,1.9,1.10,1.11,1.11.1,1.11.2,1.11.3,1.12,1.13,1.14,1.15,1.16,1.17,1.18,1.19,1.20,2.00,2.01,2.02,2.03,2.04,2.05,2.06,2.07,2.08; Upgrade canonical ubuntu_linux to a higher version than 10.04,10.10,and avoid the version 10.04,10.10; Upgrade debian debian_linux to a higher version than *