CVE-2008-3285 The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
HighCVSS 9.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alain barbet filesys smbclientparser | = 2.1 | No fix listed |
| alain barbet filesys smbclientparser | = 2.2 | No fix listed |
| alain barbet filesys smbclientparser | = 2.3 | No fix listed |
| alain barbet filesys smbclientparser | = 2.4 | No fix listed |
| alain barbet filesys smbclientparser | = 2.5 | No fix listed |
| alain barbet filesys smbclientparser | = 2.6 | No fix listed |
| alain barbet filesys smbclientparser | = 2.7 | No fix listed |
References
- 31175 third-party-advisory vendor-advisory
- 4027 third-party-advisory
- 20080718 [ISecAuditors Security Advisories] SmbClientParser Perl module allows remote command execution mailing-list
- 30290 vdb-entry
- filesyssmb-directory-command-execution(43910) vdb-entry