Lucene search

K
cveMitreCVE-2008-7158
HistorySep 02, 2009 - 5:30 p.m.

CVE-2008-7158

2009-09-0217:30:00
CWE-78
mitre
web.nvd.nist.gov
31
cve-2008-7158
numara footprints
remote attackers
arbitrary commands
shell metacharacters
vulnerability
security advisory

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.012

Percentile

85.1%

Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
numarasoftwarefootprintsMatch7.5a
OR
numarasoftwarefootprintsMatch7.5a1
OR
numarasoftwarefootprintsMatch8.0
OR
numarasoftwarefootprintsMatch8.0a
VendorProductVersionCPE
numarasoftwarefootprints7.5acpe:2.3:a:numarasoftware:footprints:7.5a:*:*:*:*:*:*:*
numarasoftwarefootprints7.5a1cpe:2.3:a:numarasoftware:footprints:7.5a1:*:*:*:*:*:*:*
numarasoftwarefootprints8.0cpe:2.3:a:numarasoftware:footprints:8.0:*:*:*:*:*:*:*
numarasoftwarefootprints8.0acpe:2.3:a:numarasoftware:footprints:8.0a:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.012

Percentile

85.1%

Related for CVE-2008-7158