CVE ID:	CVE-2008-5718
Description:	The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
Test IDs:	1.3.6.1.4.1.25623.1.0.65864   1.3.6.1.4.1.25623.1.0.63625   1.3.6.1.4.1.25623.1.0.63675   1.3.6.1.4.1.25623.1.0.63219   1.3.6.1.4.1.25623.1.0.63676
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5718 BugTraq ID: 32925 http://www.securityfocus.com/bid/32925 Debian Security Information: DSA-1705 (Google Search) http://www.debian.org/security/2009/dsa-1705 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00962.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00966.html http://www.openwall.com/lists/oss-security/2009/01/13/3 http://osvdb.org/50824 http://secunia.com/advisories/33227 http://secunia.com/advisories/33548 http://secunia.com/advisories/34484 SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html