Open Redirect

Affecting git package, versions <1:2.1.4-2.1+deb8u4

Overview

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.

References

• Apple Security Advisory
• CVE Details
• Debian Security Advisory
• Debian Security Tracker
• Exploit DB
• Gentoo Security Advisory
• MISC
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• RHSA Security Advisory
• Security Focus
• Security Tracker
• Ubuntu CVE Tracker