CVE:CVE-2018-1083
CNNVD:CNNVD-201803-1049
Zsh是一个使用在Linux系统中的交互式命令解释器和命令编程语言。
Zsh 5.4.2-test-1之前版本中的shell autocomplete功能存在安全漏洞。本地攻击者可通过创建特制的目录路径利用该漏洞执行代码，也可能提升权限。
solution:Upgrade zsh zsh to a higher version than 5.4.1,and avoid the version (,5.4.1]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0