Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2008-5517
HistoryJan 13, 2009 - 12:00 a.m.

CVE-2008-5517

2009-01-1300:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.347 Low

EPSS

Percentile

97.1%

JSON

The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote
attackers to execute arbitrary commands via shell metacharacters related to
(1) git_snapshot and (2) git_object.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchgit-core< 1:1.5.2.5-2ubuntu0.1UNKNOWN
ubuntu8.04noarchgit-core< 1:1.5.4.3-1ubuntu2.1UNKNOWN

Related

nessus 6
cve 1
prion 1
seebug 2
debian 1
packetstorm 1
exploitpack 1
redhatcve 2
openvas 15
exploitdb 1
slackware 1
gentoo 1
osv 1
ubuntu 1
nessus
nessus
GIT gitweb git_snapshot / git_object Shell Metacharacter Arbitrary Command Execution
2010-02-21 00:00:00
openSUSE 10 Security Update : git (git-5892)
2009-01-11 00:00:00
GLSA-200903-15 : git: Multiple vulnerabilities
2009-03-10 00:00:00
cve
cve
CVE-2008-5517
2009-01-13 17:00:00
prion
prion
Design/Logic Flaw
2009-01-13 17:00:00
seebug
seebug
gitWeb v1.5.2 Remote Command Execution
2010-02-19 00:00:00
gitWeb 1.5.2 - Remote Command Execution
2014-07-01 00:00:00
debian
debian
[SECURITY] [DSA 1708-1] New Git packages fix remote code execution
2009-01-19 20:53:42
packetstorm
packetstorm
gitWeb 1.x Remote Command Execution
2010-02-19 00:00:00
exploitpack
exploitpack
gitWeb 1.5.2 - Remote Command Execution
2010-02-18 00:00:00
redhatcve
redhatcve
CVE-2008-5517
2019-10-04 20:55:05
CVE-2008-5516
2019-10-04 20:54:58
openvas
openvas
Debian Security Advisory DSA 1708-1 (git-core)
2009-01-20 00:00:00
Gentoo Security Advisory GLSA 200903-15 (git)
2009-03-13 00:00:00
Slackware: Security Advisory (SSA:2009-051-02)
2012-09-10 00:00:00
exploitdb
exploitdb
gitWeb 1.5.2 - Remote Command Execution
2010-02-18 00:00:00
slackware
slackware
git
2009-02-20 17:06:57
gentoo
gentoo
git: Multiple vulnerabilties
2009-03-09 00:00:00
osv
osv
git-core - remote code execution
2009-01-19 00:00:00
ubuntu
ubuntu
Git vulnerabilities
2009-02-18 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.347 Low

EPSS

Percentile

97.1%

JSON
Related for UB:CVE-2008-5517
nessus6cve1prion1seebug2debian1packetstorm1exploitpack1redhatcve2openvas15exploitdb1slackware1gentoo1osv1ubuntu1