CVE-2008-3907

Опубликовано: 04 сент. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

Комментарий

http://www.openwall.com/lists/oss-security/2008/09/01/4

"The previous version allowed to execute arbitrary code by a crafted feed URL that is passed as a command line parameter if the URL is opened by an external browser."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:newsbeuter:newsbeuter:*:*:*:*:*:*:*:*

Версия до 1.0 (включая)

cpe:2.3:a:newsbeuter:newsbeuter:0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.2:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.3:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.4:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.5:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.6:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.7:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.8:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.8.2:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.9:*:*:*:*:*:*:*

cpe:2.3:a:newsbeuter:newsbeuter:0.9.1:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00731

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2008-3907

ubuntu

больше 17 лет назад

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

CVE-2008-3907

debian

больше 17 лет назад

The open-in-browser command in newsbeuter before 1.1 allows remote att ...

GHSA-c24p-p34c-x969

github

почти 4 года назад

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

EPSS

Процентиль: 72%

0.00731

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20