Mandriva Linux Security Advisory – Dean Gaudet discovered the geoipupdate utility fails to do sanity checking on the filename returned by “GET /app/update_getfilename?product_id=%s”.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53564/MDKSA-2007-004.txt
Source: https://packetstormsecurity.com/files/53564/Mandriva-Linux-Security-Advisory-2007.004.html