Lucene search

K
cveMitreCVE-2008-1467
HistoryMar 24, 2008 - 9:44 p.m.

CVE-2008-1467

2008-03-2421:44:00
CWE-94
mitre
web.nvd.nist.gov
30
centerim
cve-2008-1467
security
remote execution
uri
vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.071

Percentile

94.0%

CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to “received URLs in the message window.” NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by the victim

Affected configurations

Nvd
Node
centerimcenterimMatch4.22.3
VendorProductVersionCPE
centerimcenterim4.22.3cpe:2.3:a:centerim:centerim:4.22.3:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.071

Percentile

94.0%