CVE ID:	CVE-2008-1568
Description:	comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs.
Test IDs:	1.3.6.1.4.1.25623.1.0.860810   1.3.6.1.4.1.25623.1.0.60763   1.3.6.1.4.1.25623.1.0.60761   1.3.6.1.4.1.25623.1.0.860298
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1568 BugTraq ID: 28547 http://www.securityfocus.com/bid/28547 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00171.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00183.html http://security.gentoo.org/glsa/glsa-200804-29.xml http://secunia.com/advisories/29621 http://secunia.com/advisories/29731 http://secunia.com/advisories/29956 XForce ISS Database: comix-filename-command-execution(41554) https://exchange.xforce.ibmcloud.com/vulnerabilities/41554