NVD

Id
2482  
Name
CVE-2008-2575  
Description
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-06-06  
Modified Date
2011-03-07  
Seq
2008-2575  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
15694 2482 CVE-2008-2575 http://cvs.fedoraproject.org/viewcvs/rpms/cbrpager/devel/cbrpager-0.9.16-filen-shell-escaping.patch?rev=1.2  View
15695 2482 CVE-2008-2575 GLSA-200806-05  View
15696 2482 CVE-2008-2575 http://sourceforge.net/forum/forum.php?forum_id=827120  View
15697 2482 CVE-2008-2575 http://sourceforge.net/project/shownotes.php?release_id=601538&group_id=119647  View
15698 2482 CVE-2008-2575 http://www.jcoppens.com/soft/cbrpager/log.en.php  View
15699 2482 CVE-2008-2575 ADV-2008-1693  View
15700 2482 CVE-2008-2575 cbrpager-archive-command-execution(42741)  View
15701 2482 CVE-2008-2575 https://bugzilla.redhat.com/show_bug.cgi?id=448285  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49200 JVNDB-2008-004510 cbrPager における任意のコマンドを実行される脆弱性 cbrPager には、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-2575 32688 CVE-2008-2575 2482 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004510.html 2008-06-06 2012-09-25 View