NVD

Id
5550  
Name
CVE-2008-5810  
Description
WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-02  
Modified Date
2011-03-07  
Seq
2008-5810  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34542 5550 CVE-2008-5810 http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english  View
34543 5550 CVE-2008-5810 4856  View
34544 5550 CVE-2008-5810 http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt  View
34545 5550 CVE-2008-5810 20081219 SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactionsremote command injection vulnerability  View
34546 5550 CVE-2008-5810 32927  View
34547 5550 CVE-2008-5810 1021475  View
34548 5550 CVE-2008-5810 ADV-2008-3462  View
34549 5550 CVE-2008-5810 webtransactions-wbpublish-command-injection(47495)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41730 JVNDB-2009-002737 Fujitsu-Siemens WebTransactions の WBPublish.exe における任意のコマンドを実行される脆弱性 Fujitsu-Siemens WebTransactions の WBPublish には、(1) ディレクトリ名、(2) テンプレート名、および (3) セッションID に関連する不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-5810 35923 CVE-2008-5810 5550 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002737.html 2009-01-02 2012-06-26 View