Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4796
HistoryOct 30, 2008 - 12:00 a.m.

CVE-2008-4796

2008-10-3000:00:00
ubuntu.com
ubuntu.com
21

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.4%

The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and
earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4)
mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows
remote attackers to execute arbitrary commands via shell metacharacters in
https URLs.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmoodle< 1.8.2-1ubuntu4.2UNKNOWN
ubuntu8.10noarchmoodle< 1.8.2-1.2ubuntu2.1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.4%