CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
the_sword_projectdiatheke_front_end
𝑥
≤ 1.5.9
the_sword_projectsword
𝑥
≤ 1.5.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sword
bookworm
1.9.0+dfsg-4
fixed
bullseye
1.9.0+dfsg-4
fixed
sid
1.9.0+dfsg-7
fixed
trixie
1.9.0+dfsg-7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sword
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
Fixed 1.5.9-8ubuntu1
released
intrepid
Fixed 1.5.9-8ubuntu1
released
jaunty
Fixed 1.5.9-8ubuntu1
released
karmic
Fixed 1.5.9-8ubuntu1
released
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449
http://secunia.com/advisories/25400
http://secunia.com/advisories/29012
http://secunia.com/advisories/29115
http://secunia.com/advisories/29181
http://security.gentoo.org/glsa/glsa-200803-06.xml
http://www.debian.org/security/2008/dsa-1508
http://www.securityfocus.com/bid/27874
http://www.securityfocus.com/bid/27987
http://www.vupen.com/english/advisories/2008/0670/references
https://bugzilla.redhat.com/show_bug.cgi?id=433723
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00806.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449
http://secunia.com/advisories/25400
http://secunia.com/advisories/29012
http://secunia.com/advisories/29115
http://secunia.com/advisories/29181
http://security.gentoo.org/glsa/glsa-200803-06.xml
http://www.debian.org/security/2008/dsa-1508
http://www.securityfocus.com/bid/27874
http://www.securityfocus.com/bid/27987
http://www.vupen.com/english/advisories/2008/0670/references
https://bugzilla.redhat.com/show_bug.cgi?id=433723
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00806.html