CVE:CVE-2014-8990
CNNVD:CNNVD-201411-357
Lsyncd（Live Syncing Daemon）是一个通过inotify或fsevents（实时的Linux文件系统事件监控接口）来监视本机目录树，并将其实时同步（mirror）到远端目标机器上的同步守护进程。
Lsyncd 2.1.5及之前版本的default-rsyncssh.lua文件中存在安全漏洞。远程攻击者可借助文件名中的shell元字符利用该漏洞执行任意命令。
solution:Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 19,20,and avoid the version 19,20; Upgrade lsyncd_project lsyncd to a higher version than 2.1.5,and avoid the version (,2.1.5]