Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-0932
HistoryFeb 25, 2008 - 9:44 p.m.

CVE-2008-0932

2008-02-2521:44:00
CWE-20
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.2%

JSON

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

Affected configurations

NVD
Node
debiandebian_linuxMatch3.1
OR
debiandebian_linuxMatch3.1alpha
OR
debiandebian_linuxMatch3.1amd64
OR
debiandebian_linuxMatch3.1arm
OR
debiandebian_linuxMatch3.1hppa
OR
debiandebian_linuxMatch3.1ia-32
OR
debiandebian_linuxMatch3.1ia-64
OR
debiandebian_linuxMatch3.1m68k
OR
debiandebian_linuxMatch3.1mips
OR
debiandebian_linuxMatch3.1mipsel
OR
debiandebian_linuxMatch3.1ppc
OR
debiandebian_linuxMatch3.1s-390
OR
debiandebian_linuxMatch3.1sparc
OR
debiandebian_linuxMatch3.1r1
OR
debiandebian_linuxMatch4.0
OR
debiandebian_linuxMatch4.0alpha
OR
debiandebian_linuxMatch4.0amd64
OR
debiandebian_linuxMatch4.0arm
OR
debiandebian_linuxMatch4.0hppa
OR
debiandebian_linuxMatch4.0ia-32
OR
debiandebian_linuxMatch4.0ia-64
OR
debiandebian_linuxMatch4.0m68k
OR
debiandebian_linuxMatch4.0mips
OR
debiandebian_linuxMatch4.0mipsel
OR
debiandebian_linuxMatch4.0powerpc
OR
debiandebian_linuxMatch4.0s-390
OR
debiandebian_linuxMatch4.0sparc
OR
redhatfedoraMatch7
OR
redhatfedoraMatch8
AND
the_sword_projectdiatheke_front_endRange≤1.5.9
OR
the_sword_projectswordRange≤1.5.9

Related

openvas 8
cvelist 1
prion 1
nessus 4
securityvulns 4
osv 1
ubuntucve 1
debiancve 1
redhatcve 1
gentoo 1
debian 1
cve 1
openvas
openvas
Fedora Update for sword FEDORA-2008-1922
2009-02-16 00:00:00
Gentoo Security Advisory GLSA 200803-06 (sword)
2008-09-24 00:00:00
Fedora Update for sword FEDORA-2008-1951
2009-02-16 00:00:00
cvelist
cvelist
CVE-2008-0932
2008-02-25 21:00:00
prion
prion
Design/Logic Flaw
2008-02-25 21:44:00
nessus
nessus
Fedora 7 : sword-1.5.10-2.fc7 (2008-1922)
2008-02-26 00:00:00
Debian DSA-1508-1 : diatheke - insufficient input sanitising
2008-02-26 00:00:00
GLSA-200803-06 : SWORD: Shell command injection
2008-03-07 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-02-27 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-03-04 00:00:00
[ GLSA 200803-06 ] SWORD: Shell command injection
2008-03-04 00:00:00
osv
osv
sword - arbirary shell command execution
2008-02-25 00:00:00
ubuntucve
ubuntucve
CVE-2008-0932
2008-02-25 00:00:00
debiancve
debiancve
CVE-2008-0932
2008-02-25 21:44:00
redhatcve
redhatcve
CVE-2008-0932
2019-10-04 21:50:00
gentoo
gentoo
SWORD: Shell command injection
2008-03-03 00:00:00
debian
debian
[SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution
2008-02-25 18:50:26
cve
cve
CVE-2008-0932
2008-02-25 21:44:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.2%

JSON
Related for NVD:CVE-2008-0932
openvas8cvelist1prion1nessus4securityvulns4osv1ubuntucve1debiancve1redhatcve1gentoo1debian1cve1