9.3

CVE-2008-1319

Exploit

EPSS 11.82%
Veröffentlicht 13.03.2008 14:44:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Versant ≫ Versant Object Database Version <= 7.0.1.3

Versant ≫ Versant Object Database Version7.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	11.82%	0.934

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://aluigi.altervista.org/adv/versantcmd-adv.txt

Exploit

http://marc.info/?l=bugtraq&m=120468784112145&w=2

http://secunia.com/advisories/29230

Vendor Advisory

http://securityreason.com/securityalert/3738

Exploit

http://www.securityfocus.com/archive/1/489139/100/0/threaded

http://www.securityfocus.com/bid/28097

Exploit

http://www.vupen.com/english/advisories/2008/0764/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/40997

https://www.exploit-db.com/exploits/5213

https://nvd.nist.gov/vuln/detail/CVE-2008-1319

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1319

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1319

EUVD