CVE

Id
31584  
CVE No.
CVE-2008-1467  
Status
Candidate  
Description
** DISPUTED ** CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to "received URLs in the message window." NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by the victim.  
Phase
Assigned (20080324)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
339306 31584 CVE-2008-1467 MILW0RM:5283  View
339307 31584 CVE-2008-1467 URL:http://www.milw0rm.com/exploits/5283  View
339308 31584 CVE-2008-1467 FEDORA:FEDORA-2008-2867  View
339309 31584 CVE-2008-1467 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00073.html  View
339310 31584 CVE-2008-1467 FEDORA:FEDORA-2008-2869  View
339311 31584 CVE-2008-1467 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00076.html  View
339312 31584 CVE-2008-1467 BID:28362  View
339313 31584 CVE-2008-1467 URL:http://www.securityfocus.com/bid/28362  View
339314 31584 CVE-2008-1467 VUPEN:ADV-2008-0956  View
339315 31584 CVE-2008-1467 URL:http://www.vupen.com/english/advisories/2008/0956/references  View
339316 31584 CVE-2008-1467 SECUNIA:29489  View
339317 31584 CVE-2008-1467 URL:http://secunia.com/advisories/29489  View
339318 31584 CVE-2008-1467 SECUNIA:29597  View
339319 31584 CVE-2008-1467 URL:http://secunia.com/advisories/29597  View
339320 31584 CVE-2008-1467 XF:centerim-chat-shell-command-execution(41362)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48945 JVNDB-2008-004255 Panda Internet Security などの cpoint.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性 Panda Internet Security および Antivirus and Firewall の cpoint.sys ドライバには、サービス運用妨害 (システムクラッシュまたはカーネルパニック) 状態となる、メモリを上書きされる、または任意のコードを実行される脆弱性が存在します。 CVE-2008-1471 31584 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004255.html  View