NVD

Id
5647  
Name
CVE-2008-5916  
Description
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-01-20  
Modified Date
2009-08-19  
Seq
2008-5916  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34942 5647 CVE-2008-5916 [git] 20081220 [Security] gitweb local privilege escalation (fix)  View
34943 5647 CVE-2008-5916 [linux-kernel] 20081220 [Security] gitweb local privilege escalation (fix)  View
34944 5647 CVE-2008-5916 4922  View
34945 5647 CVE-2008-5916 GLSA-200903-15  View
34946 5647 CVE-2008-5916 [oss-security] 20090115 CVE request -- git  View
34947 5647 CVE-2008-5916 [oss-security] 20090120 Re: CVE request -- git  View
34948 5647 CVE-2008-5916 USN-723-1  View
34949 5647 CVE-2008-5916 git-gitweb-privilege-escalation(47528)  View
34950 5647 CVE-2008-5916 FEDORA-2008-11650  View
34951 5647 CVE-2008-5916 FEDORA-2008-11653  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41640 JVNDB-2009-002647 Git の gitweb/gitweb.perl における任意のコマンドを実行される脆弱性 Git の gitweb 内にある gitweb/gitweb.perl には、ローカルリポジトリのオーナー権限で任意のコマンドを実行される脆弱性が存在します。 CVE-2008-5916 36029 CVE-2008-5916 5647 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002647.html 2009-01-21 2011-04-21 View