CVE-2008-2575

Опубликовано: 06 июн. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Ссылки

http://cvs.fedoraproject.org/viewcvs/rpms/cbrpager/devel/cbrpager-0.9.16-filen-shell-escaping.patch?rev=1.2
Broken Link
Exploit
http://secunia.com/advisories/30417
Broken Link
Vendor Advisory
http://secunia.com/advisories/30438
Broken Link
Vendor Advisory
http://secunia.com/advisories/30701
Broken Link
http://security.gentoo.org/glsa/glsa-200806-05.xml
Third Party Advisory
http://sourceforge.net/forum/forum.php?forum_id=827120
Broken Link
Patch
http://sourceforge.net/project/shownotes.php?release_id=601538&group_id=119647
Patch
http://www.jcoppens.com/soft/cbrpager/log.en.php
Release Notes
http://www.vupen.com/english/advisories/2008/1693/references
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=448285
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42741
Third Party Advisory
VDB Entry
http://cvs.fedoraproject.org/viewcvs/rpms/cbrpager/devel/cbrpager-0.9.16-filen-shell-escaping.patch?rev=1.2
Broken Link
Exploit
http://secunia.com/advisories/30417
Broken Link
Vendor Advisory
http://secunia.com/advisories/30438
Broken Link
Vendor Advisory
http://secunia.com/advisories/30701
Broken Link
http://security.gentoo.org/glsa/glsa-200806-05.xml
Third Party Advisory
http://sourceforge.net/forum/forum.php?forum_id=827120
Broken Link
Patch
http://sourceforge.net/project/shownotes.php?release_id=601538&group_id=119647
Patch
http://www.jcoppens.com/soft/cbrpager/log.en.php
Release Notes
http://www.vupen.com/english/advisories/2008/1693/references
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jcoppens:cbrpager:*:*:*:*:*:*:*:*

Версия до 0.9.17 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.0099

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2008-2575

ubuntu

больше 17 лет назад

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

CVE-2008-2575

redhat

больше 17 лет назад

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

CVE-2008-2575

debian

больше 17 лет назад

cbrPager before 0.9.17 allows user-assisted remote attackers to execut ...

GHSA-7w42-h9j5-82q5

github

больше 3 лет назад

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

EPSS

Процентиль: 76%

0.0099

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-78