Debian Security Advisory DSA 772-1 – Eduard Bloch discovered a bug in apt-cacher, a caching system for Debian package and source files, that could allow remote attackers to execute arbitrary commands on the caching host as user www-data.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39050/dsa-772-1.txt
Source: https://packetstormsecurity.com/files/39050/Debian-Linux-Security-Advisory-772-1.html