Lucene search

K
freebsdFreeBSD8F483746-D45D-11DD-84EC-001FC66E7203
HistoryDec 12, 2008 - 12:00 a.m.

roundcube -- remote execution of arbitrary code

2008-12-1200:00:00
vuxml.freebsd.org
14

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%

Entry for CVE-2008-5619 says:

html2text.php in RoundCube Webmail (roundcubemail)
0.2-1.alpha and 0.2-3.beta allows remote attackers to execute
arbitrary code via crafted input that is processed by the
preg_replace function with the eval switch.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchroundcube< 0.2.b2,1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%