[Forgot Password]
Login  Register Subscribe

23631

 
 

117687

 
 

98503

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-3907

Date: (C)2008-09-04   (M)2017-08-08 


The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

CVSS Score: 6.8Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL





Reference:
BID-30964
SECUNIA-31676
SECUNIA-31995
GLSA-200809-12
http://www.openwall.com/lists/oss-security/2008/09/01/4
http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/
http://www.newsbeuter.org/downloads/CHANGES
newsbeuter-url-command-execution(44791)

CWE    1
CWE-20

© 2013 SecPod Technologies