htdig allows remote malicious users to execute commands via filenames with shell metacharacters.
debian debian linux 2.1