CVE-2008-0932

EPSS 1.88%
Veröffentlicht 25.02.2008 21:44:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 16

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

The Sword Project ≫ Diatheke Front End Version <= 1.5.9

   Debian ≫ Debian Linux Version3.1
   Debian ≫ Debian Linux Version3.1 Editionalpha
   Debian ≫ Debian Linux Version3.1 Editionamd64
   Debian ≫ Debian Linux Version3.1 Editionarm
   Debian ≫ Debian Linux Version3.1 Editionhppa
   Debian ≫ Debian Linux Version3.1 Editionia-32
   Debian ≫ Debian Linux Version3.1 Editionia-64
   Debian ≫ Debian Linux Version3.1 Editionm68k
   Debian ≫ Debian Linux Version3.1 Editionmips
   Debian ≫ Debian Linux Version3.1 Editionmipsel
   Debian ≫ Debian Linux Version3.1 Editionppc
   Debian ≫ Debian Linux Version3.1 Editions-390
   Debian ≫ Debian Linux Version3.1 Editionsparc
   Debian ≫ Debian Linux Version3.1 Updater1
   Debian ≫ Debian Linux Version4.0
   Debian ≫ Debian Linux Version4.0 Editionalpha
   Debian ≫ Debian Linux Version4.0 Editionamd64
   Debian ≫ Debian Linux Version4.0 Editionarm
   Debian ≫ Debian Linux Version4.0 Editionhppa
   Debian ≫ Debian Linux Version4.0 Editionia-32
   Debian ≫ Debian Linux Version4.0 Editionia-64
   Debian ≫ Debian Linux Version4.0 Editionm68k
   Debian ≫ Debian Linux Version4.0 Editionmips
   Debian ≫ Debian Linux Version4.0 Editionmipsel
   Debian ≫ Debian Linux Version4.0 Editionpowerpc
   Debian ≫ Debian Linux Version4.0 Editions-390
   Debian ≫ Debian Linux Version4.0 Editionsparc
   Redhat ≫ Fedora Version7
   Redhat ≫ Fedora Version8

The Sword Project ≫ Sword Version <= 1.5.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.88%	0.828

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449

http://secunia.com/advisories/25400

http://secunia.com/advisories/29012

Vendor Advisory

http://secunia.com/advisories/29115

Vendor Advisory

http://secunia.com/advisories/29181

http://security.gentoo.org/glsa/glsa-200803-06.xml

http://www.debian.org/security/2008/dsa-1508

http://www.securityfocus.com/bid/27874

http://www.securityfocus.com/bid/27987

http://www.vupen.com/english/advisories/2008/0670/references