NVD

Id
1278  
Name
CVE-2008-1319  
Description
Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-13  
Modified Date
2011-03-07  
Seq
2008-1319  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8058 1278 CVE-2008-1319 http://aluigi.altervista.org/adv/versantcmd-adv.txt  View
8059 1278 CVE-2008-1319 20080304 Arbitrary commands execution in Versant Object Database 7.0.1.3  View
8060 1278 CVE-2008-1319 3738  View
8061 1278 CVE-2008-1319 5213  View
8062 1278 CVE-2008-1319 20080304 Arbitrary commands execution in Versant Object Database 7.0.1.3  View
8063 1278 CVE-2008-1319 28097  View
8064 1278 CVE-2008-1319 ADV-2008-0764  View
8065 1278 CVE-2008-1319 objectdatabase-versantd-cmd-execution(40997)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50271 JVNDB-2008-005581 Borland CaliberRM などで使用される Versant Object Database における任意のコマンドを実行される脆弱性 Borland CaliberRM およびその他の製品で使用される Versant Object Database の VersantD サービスは、検索パスに関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-1319 31432 CVE-2008-1319 1278 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005581.html 2008-03-13 2012-12-20 View