Debian Security Advisory 1251-1 – It has been discovered that netrik, a text mode WWW browser with vi like keybindings, doesn’t properly sanitize temporary filenames when editing textareas which could allow attackers to execute arbitrary commands via shell metacharacters.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53857/dsa-1251-1.txt
Source: https://packetstormsecurity.com/files/53857/Debian-Linux-Security-Advisory-1251-1.html