PRIOn knowledge basePRION:CVE-2008-3907Open redirect
7.9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.4%
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| newsbeuter | eq | 0.5 | |
| newsbeuter | eq | 0.2 | |
| newsbeuter | eq | 0.8 | |
| newsbeuter | eq | 0.4 | |
| newsbeuter | le | 1.0 | |
| newsbeuter | eq | 0.9 | |
| newsbeuter | eq | 0.1.1 | |
| newsbeuter | eq | 0.8.1 | |
| newsbeuter | eq | 0.8.2 | |
| newsbeuter | eq | 0.7 |
References
newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/
secunia.com/advisories/31676
secunia.com/advisories/31995
security.gentoo.org/glsa/glsa-200809-12.xml
www.newsbeuter.org/downloads/CHANGES
www.openwall.com/lists/oss-security/2008/09/01/4
www.securityfocus.com/bid/30964
exchange.xforce.ibmcloud.com/vulnerabilities/44791
Related
7.9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.4%