susehelp in SuSE Linux 8.1 Enterprise Server 8 Office Server and Openexchange Server 4 does not properly filter shell metacharacters which allows remote attackers to execute arbitrary commands via CGI queries.