CVE-2008-0932

EPSS 2.9%
Veröffentlicht 25.02.2008 21:44:00
Zuletzt bearbeitet 16.06.2026 22:50:37
Erkennungen
Login

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 16

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

The Sword Project ≫ Diatheke Front End Version <= 1.5.9

   Debian ≫ Debian Linux Version 3.1
   Debian ≫ Debian Linux Version 3.1 Edition alpha
   Debian ≫ Debian Linux Version 3.1 Edition amd64
   Debian ≫ Debian Linux Version 3.1 Edition arm
   Debian ≫ Debian Linux Version 3.1 Edition hppa
   Debian ≫ Debian Linux Version 3.1 Edition ia-32
   Debian ≫ Debian Linux Version 3.1 Edition ia-64
   Debian ≫ Debian Linux Version 3.1 Edition m68k
   Debian ≫ Debian Linux Version 3.1 Edition mips
   Debian ≫ Debian Linux Version 3.1 Edition mipsel
   Debian ≫ Debian Linux Version 3.1 Edition ppc
   Debian ≫ Debian Linux Version 3.1 Edition s-390
   Debian ≫ Debian Linux Version 3.1 Edition sparc
   Debian ≫ Debian Linux Version 3.1 Update r1
   Debian ≫ Debian Linux Version 4.0
   Debian ≫ Debian Linux Version 4.0 Edition alpha
   Debian ≫ Debian Linux Version 4.0 Edition amd64
   Debian ≫ Debian Linux Version 4.0 Edition arm
   Debian ≫ Debian Linux Version 4.0 Edition hppa
   Debian ≫ Debian Linux Version 4.0 Edition ia-32
   Debian ≫ Debian Linux Version 4.0 Edition ia-64
   Debian ≫ Debian Linux Version 4.0 Edition m68k
   Debian ≫ Debian Linux Version 4.0 Edition mips
   Debian ≫ Debian Linux Version 4.0 Edition mipsel
   Debian ≫ Debian Linux Version 4.0 Edition powerpc
   Debian ≫ Debian Linux Version 4.0 Edition s-390
   Debian ≫ Debian Linux Version 4.0 Edition sparc
   Redhat ≫ Fedora Version 7
   Redhat ≫ Fedora Version 8

The Sword Project ≫ Sword Version <= 1.5.9

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.9%	0.851

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449

http://secunia.com/advisories/25400

http://secunia.com/advisories/29012

Vendor Advisory

http://secunia.com/advisories/29115

Vendor Advisory

http://secunia.com/advisories/29181

http://security.gentoo.org/glsa/glsa-200803-06.xml

http://www.debian.org/security/2008/dsa-1508

http://www.securityfocus.com/bid/27874

http://www.securityfocus.com/bid/27987

http://www.vupen.com/english/advisories/2008/0670/references

https://bugzilla.redhat.com/show_bug.cgi?id=433723

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00806.html

https://nvd.nist.gov/vuln/detail/CVE-2008-0932

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0932

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0932

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-0932