View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2007-0404 medium priority: Ubuntu including 1 source packages (python-django), 5 status rows across 5 suites (dapper, edgy, feisty, gutsy, upstream): DNE 2, not-affected 2, released 1.
bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.