CVE

Id
34024  
CVE No.
CVE-2008-3907  
Status
Candidate  
Description
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371554 34024 CVE-2008-3907 MLIST:[oss-security] 20080901 CVE id request: newsbeuter  View
371555 34024 CVE-2008-3907 URL:http://www.openwall.com/lists/oss-security/2008/09/01/4  View
371556 34024 CVE-2008-3907 CONFIRM:http://www.newsbeuter.org/downloads/CHANGES  View
371557 34024 CVE-2008-3907 CONFIRM:http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/  View
371558 34024 CVE-2008-3907 GENTOO:GLSA-200809-12  View
371559 34024 CVE-2008-3907 URL:http://security.gentoo.org/glsa/glsa-200809-12.xml  View
371560 34024 CVE-2008-3907 BID:30964  View
371561 34024 CVE-2008-3907 URL:http://www.securityfocus.com/bid/30964  View
371562 34024 CVE-2008-3907 SECUNIA:31676  View
371563 34024 CVE-2008-3907 URL:http://secunia.com/advisories/31676  View
371564 34024 CVE-2008-3907 SECUNIA:31995  View
371565 34024 CVE-2008-3907 URL:http://secunia.com/advisories/31995  View
371566 34024 CVE-2008-3907 XF:newsbeuter-url-command-execution(44791)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49508 JVNDB-2008-004818 Linux kernel におけるスタックベースのバッファをオーバーフローされる脆弱性 Linux kernel の net/sunrpc/sysctl.c の proc_do_xprt 関数は、userspace から取得された特定のバッファの長さをチェックしないため、スタックベースのバッファをオーバーフローされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2008-3911 34024 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004818.html  View