Secunia

A security issue has been reported in renattach, which has an unknown impact, but potentially could allow execution of arbitrary commands.

The problem is that the pipe functionality is provided in an insecure way, which potentially can be exploited to inject arbitrary shell commands.

Successful exploitation requires that the "-p" or "--pipe" command line option is used.

The security issue has been reported in version 1.2.0 and 1.2.1.

NOTE: According to the vendor, there does not seem to be a practical way of exploiting the vulnerability for arbitrary command execution.

Solution
Update to version 1.2.2.
Further details available in Customer Area

Provided and/or discovered by
Victor Duchovni

Original Advisory
http://www.pc-tools.net/unix/renattach/2004-10-03.txt

Deep Links
Links available in Customer Area