CVE-2008-7315 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 89%

Debian Releases

Debian Product

Codename

libui-dialog-perl

bookworm	1.21-0.1 fixed
bullseye	1.21-0.1 fixed
jessie	no-dsa
sid	1.21-0.1 fixed
squeeze	no-dsa
trixie	1.21-0.1 fixed
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

libui-dialog-perl

artful	ignored
bionic	dne
cosmic	dne
disco	not-affected
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
precise	ignored
trusty	dne
vivid	ignored
wily	ignored
xenial	needed
yakkety	ignored
zesty	ignored

Common Weakness Enumeration

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References

http://www.openwall.com/lists/oss-security/2015/10/08/6

http://www.securityfocus.com/bid/77031/info

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448

https://rt.cpan.org/Public/Bug/Display.html?id=107364

https://security-tracker.debian.org/tracker/CVE-2008-7315/

http://www.openwall.com/lists/oss-security/2015/10/08/6

http://www.securityfocus.com/bid/77031/info

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448

https://rt.cpan.org/Public/Bug/Display.html?id=107364

https://security-tracker.debian.org/tracker/CVE-2008-7315/