[Secure-testing-team] Bug#575286: Rbot Owner Reaction Command Execution

[Moritz Muehlenhoff]

Package: rbot
Severity: grave
Tags: security

Please see http://www.securityfocus.com/archive/1/509719/30/0/threaded

Is this "reaction plugin" shipped/provided by default in the Debian
package?

Cheers,
	Moritz

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-3-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages rbot depends on:
pn  libdb4.3-ruby1.8 | libdb4.2-r <none>     (no description available)
pn  libopenssl-ruby1.8            <none>     (no description available)
ii  ruby                          4.2        An interpreter of object-oriented 

Versions of packages rbot recommends:
pn  aspell                    <none>         (no description available)
ii  bind9-host [host]         1:9.7.0.dfsg-2 Version of 'host' bundled with BIN
ii  bsdmainutils              8.0.8          collection of more utilities from 
pn  fortune-mod | fortune     <none>         (no description available)
pn  librexml-ruby             <none>         (no description available)

rbot suggests no packages.