CVE-2008-5718: Netatalk

High severity, CVSS 9.3. EPSS: 4.5% chance of exploitation in the next 30 days.

The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.

Affected products

• Netatalk Netatalk: up to and including 2.0.3; version 1.4.99-0.20000927 only; version 1.4.99-0.20001108 only; version 1.5 only; version 1.5.0 only; version 1.5.1 only; …

Published 2008-12-26. Last modified 2026-06-16.