Package: libmime-lite-perl Version: 3.01-5 Severity: normal
sendmail command and params are not constructed in a taint-safe fashion. Arguments to send_by_sendmail() are used/filled in rather than having separate vars set to defaults or untainted args. $ENV{PATH} is not untainted either, but that can be argued to be the caller's responsibility -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (101, 'unstable'), (99, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.13-1-k7 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages libmime-lite-perl depends on: ii perl 5.8.7-7 Larry Wall's Practical Extraction libmime-lite-perl recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]