CVE-2008-5919 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 91%

Affected Products (NVD)

Vendor	Product	Version
tigris	websvn	𝑥 ≤ 2.0
tigris	websvn	1.00
tigris	websvn	1.01
tigris	websvn	1.02
tigris	websvn	1.03
tigris	websvn	1.04
tigris	websvn	1.10
tigris	websvn	1.20
tigris	websvn	1.31a:a
tigris	websvn	1.32
tigris	websvn	1.33
tigris	websvn	1.34
tigris	websvn	1.37
tigris	websvn	1.38
tigris	websvn	1.39
tigris	websvn	1.40
tigris	websvn	1.51
tigris	websvn	1.60
tigris	websvn	1.61
tigris	websvn	1.62

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

websvn

dapper	ignored
gutsy	ignored
hardy	ignored
intrepid	ignored
jaunty	not-affected
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected
oneiric	not-affected

Known Exploits!

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

http://secunia.com/advisories/32338

http://secunia.com/advisories/34191

http://securityreason.com/securityalert/4928

http://websvn.tigris.org/issues/show_bug.cgi?id=179

http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218

http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml

http://www.gulftech.org/?node=research&article_id=00132-10202008

http://www.securityfocus.com/bid/31891

https://exchange.xforce.ibmcloud.com/vulnerabilities/46050

https://www.exploit-db.com/exploits/6822

http://secunia.com/advisories/32338

http://secunia.com/advisories/34191

http://securityreason.com/securityalert/4928

http://websvn.tigris.org/issues/show_bug.cgi?id=179

http://websvn.tigris.org/servlets/NewsItemView?newsItemID=2218

http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml

http://www.gulftech.org/?node=research&article_id=00132-10202008

http://www.securityfocus.com/bid/31891

https://exchange.xforce.ibmcloud.com/vulnerabilities/46050

https://www.exploit-db.com/exploits/6822