Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5516
HistoryJan 20, 2009 - 12:00 a.m.

CVE-2008-5516

2009-01-2000:00:00
ubuntu.com
ubuntu.com
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%

The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote
attackers to execute arbitrary commands via shell metacharacters related to
git_search.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchgit-core< 1:1.5.2.5-2ubuntu0.1UNKNOWN
ubuntu8.04noarchgit-core< 1:1.5.4.3-1ubuntu2.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%