Yarssr 0.2.2 - GUI.PM Remote Code Injection
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
 | CVE-2007-5837 | 5 Nov 200719:00 | – | cve |
 | CVE-2007-5837 | 5 Nov 200719:00 | – | cvelist |
 | [SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution | 27 Jan 200818:26 | – | debian |
 | CVE-2007-5837 | 5 Nov 200719:00 | – | debiancve |
 | Debian DSA-1477-1 : yarssr - missing input sanitising | 29 Jan 200800:00 | – | nessus |
 | EUVD-2007-5807 | 7 Oct 202500:30 | – | euvd |
 | CVE-2007-5837 | 5 Nov 200719:46 | – | nvd |
 | Debian: Security Advisory (DSA-1477-1) | 31 Jan 200800:00 | – | openvas |
| Debian Security Advisory DSA 1477-1 (yarssr) | 31 Jan 200800:00 | – | openvas |
10
source: www.securityfocus.com/bid/26273/info
Yarssr is prone to a remote code-injection vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this issue to inject and execute arbitrary malicious Perl code with the privileges of the user running the application. Successful exploits can compromise the application and possibly the underlying computer; other attacks are also possible.
Yarssr 0.2.2 is vulnerable; other versions may also be affected.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30728.rssData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Jan 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.8
EPSS0.06215