CVE-2008-2230 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.6 UNKNOWN	LOCAL	LOW		AV:L/AC:L/Au:N/C:P/I:P/A:P
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 47%

Vendor	Product	Version
reportbug-ng	reportbug	3.8
reportbug-ng	reportbug	3.31
reportbug-ng	reportbug-ng	0.2007.03.10
reportbug-ng	reportbug-ng	0.2007.03.11
reportbug-ng	reportbug-ng	0.2007.03.13
reportbug-ng	reportbug-ng	0.2007.03.14
reportbug-ng	reportbug-ng	0.2007.03.15
reportbug-ng	reportbug-ng	0.2007.03.17
reportbug-ng	reportbug-ng	0.2007.03.19
reportbug-ng	reportbug-ng	0.2007.03.19.2
reportbug-ng	reportbug-ng	0.2007.03.20
reportbug-ng	reportbug-ng	0.2007.03.24
reportbug-ng	reportbug-ng	0.2007.03.27
reportbug-ng	reportbug-ng	0.2007.03.28
reportbug-ng	reportbug-ng	0.2007.03.29
reportbug-ng	reportbug-ng	0.2007.04.07
reportbug-ng	reportbug-ng	0.2007.04.07.2
reportbug-ng	reportbug-ng	0.2007.04.13
reportbug-ng	reportbug-ng	0.2007.04.16
reportbug-ng	reportbug-ng	0.2007.04.20
reportbug-ng	reportbug-ng	0.2007.04.23
reportbug-ng	reportbug-ng	0.2007.04.27
reportbug-ng	reportbug-ng	0.2007.05.02
reportbug-ng	reportbug-ng	0.2007.05.27
reportbug-ng	reportbug-ng	0.2007.05.28
reportbug-ng	reportbug-ng	0.2007.05.31
reportbug-ng	reportbug-ng	0.2007.06.13
reportbug-ng	reportbug-ng	0.2007.06.27
reportbug-ng	reportbug-ng	0.2007.07.08
reportbug-ng	reportbug-ng	0.2007.07.12
reportbug-ng	reportbug-ng	0.2007.07.18
reportbug-ng	reportbug-ng	0.2007.07.19
reportbug-ng	reportbug-ng	0.2007.08.02
reportbug-ng	reportbug-ng	0.2007.08.03
reportbug-ng	reportbug-ng	0.2007.08.03.2
reportbug-ng	reportbug-ng	0.2007.08.12
reportbug-ng	reportbug-ng	0.2007.08.20
reportbug-ng	reportbug-ng	0.2007.10.30
reportbug-ng	reportbug-ng	0.2008.01.20
reportbug-ng	reportbug-ng	0.2008.03.26
reportbug-ng	reportbug-ng	0.2008.03.28

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

reportbug

bullseye	7.10.3+deb11u2 fixed
etch	no-dsa
bookworm	12.0.0 fixed
sid	13.0.1 fixed
trixie	13.0.1 fixed

Ubuntu Releases

Ubuntu Product

Codename

reportbug

oneiric	not-affected
natty	not-affected
maverick	not-affected
lucid	not-affected
karmic	not-affected
jaunty	not-affected
intrepid	not-affected
hardy	ignored
gutsy	ignored
feisty	ignored
dapper	ignored

reportbug-ng

oneiric	dne
natty	dne
maverick	dne
lucid	dne
karmic	dne
jaunty	dne
intrepid	dne
hardy	ignored
gutsy	ignored
feisty	dne
dapper	dne

Known Exploits!

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474

https://exchange.xforce.ibmcloud.com/vulnerabilities/43001

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474

https://exchange.xforce.ibmcloud.com/vulnerabilities/43001