NVD

Id
6524  
Name
CVE-2008-6793  
Description
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-05-07  
Modified Date
2009-08-11  
Seq
2008-6793  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
37817 6524 CVE-2008-6793 http://www.ikkisoft.com/stuff/LC-2008-07.txt  View
37818 6524 CVE-2008-6793 7001  View
37819 6524 CVE-2008-6793 20081105 DFLabs PTK Forensic Local Command Execution Vulnerability  View
37820 6524 CVE-2008-6793 32128  View
37821 6524 CVE-2008-6793 ADV-2008-3020  View
37822 6524 CVE-2008-6793 ptk-getfiletype-command-execution(46380)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42009 JVNDB-2009-003016 DFLabs PTK の lib/file_content.php の get_file_type 関数における任意のコマンドを実行される脆弱性 DFLabs PTK の lib/file_content.php の get_file_type 関数には、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-6793 36906 CVE-2008-6793 6524 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003016.html 2009-05-07 2012-06-26 View