CVE-2008-1319 Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remo...
HighCVSS 9.3
EPSS 4.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| versant object database | <= 7.0.1.3 | No fix listed |
| versant object database | = 7.0.1 | No fix listed |
References
- aluigi.altervista.org exploit
- 20080304 Arbitrary commands execution in Versant Object Database 7.0.1.3 mailing-list
- 29230 third-party-advisory vendor-advisory
- 3738 exploit third-party-advisory
- 20080304 Arbitrary commands execution in Versant Object Database 7.0.1.3 mailing-list
- 28097 exploit vdb-entry
- ADV-2008-0764 vdb-entry
- objectdatabase-versantd-cmd-execution(40997) vdb-entry
- 5213 exploit