Skip to content

CVE-2008-5916 gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execu...

MediumCVSS 4.6 EPSS 0.46%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.

Affected products

ProductAffected versionsFixed in
git = 1.4.3.1 No fix listed
git = 1.4.3.2 No fix listed
git = 1.4.3.3 No fix listed
git = 1.4.3.4 No fix listed
git = 1.4.3.5 No fix listed
git = 1.4.4 No fix listed
git = 1.4.4.1 No fix listed
git = 1.4.4.2 No fix listed
git = 1.4.4.3 No fix listed
git = 1.4.4.4 No fix listed
git = 1.5.0 No fix listed
git = 1.5.0-rc2 No fix listed
git = 1.5.0-rc3 No fix listed
git = 1.5.0-rc4 No fix listed
git = 1.5.0.1 No fix listed
git = 1.5.0.2 No fix listed
git = 1.5.0.3 No fix listed
git = 1.5.0.4 No fix listed
git = 1.5.0.5 No fix listed
git = 1.5.0.6 No fix listed
git = 1.5.0.7 No fix listed
git = 1.5.1 No fix listed
git = 1.5.1.1 No fix listed
git = 1.5.1.2 No fix listed
git = 1.5.1.3 No fix listed
Show 60 more
ProductAffected versionsFixed in
git = 1.5.1.4 No fix listed
git = 1.5.1.5 No fix listed
git = 1.5.1.6 No fix listed
git = 1.5.2 No fix listed
git = 1.5.2.1 No fix listed
git = 1.5.2.2 No fix listed
git = 1.5.2.3 No fix listed
git = 1.5.2.4 No fix listed
git = 1.5.2.5 No fix listed
git = 1.5.3 No fix listed
git = 1.5.3-rc4 No fix listed
git = 1.5.3-rc5 No fix listed
git = 1.5.3-rc7 No fix listed
git = 1.5.3.1 No fix listed
git = 1.5.3.2 No fix listed
git = 1.5.3.3 No fix listed
git = 1.5.3.4 No fix listed
git = 1.5.3.5 No fix listed
git = 1.5.3.6 No fix listed
git = 1.5.3.7 No fix listed
git = 1.5.3.8 No fix listed
git = 1.5.4 No fix listed
git = 1.5.4-rc0 No fix listed
git = 1.5.4-rc1 No fix listed
git = 1.5.4-rc1.1136.g2794 No fix listed
git = 1.5.4-rc2 No fix listed
git = 1.5.4-rc3 No fix listed
git = 1.5.4-rc4 No fix listed
git = 1.5.4-rc5 No fix listed
git = 1.5.4.1 No fix listed
git = 1.5.4.2 No fix listed
git = 1.5.4.3 No fix listed
git = 1.5.4.4 No fix listed
git = 1.5.4.5 No fix listed
git = 1.5.4.6 No fix listed
git = 1.5.5 No fix listed
git = 1.5.5-rc1 No fix listed
git = 1.5.5-rc2 No fix listed
git = 1.5.5-rc3 No fix listed
git = 1.5.5.1 No fix listed
git = 1.5.5.2 No fix listed
git = 1.5.5.3 No fix listed
git = 1.5.5.3-r1 No fix listed
git = 1.5.5.4 No fix listed
git = 1.5.5.5 No fix listed
git = 1.5.6 No fix listed
git = 1.5.6.1 No fix listed
git = 1.5.6.2 No fix listed
git = 1.5.6.3 No fix listed
git = 1.5.6.4 No fix listed
git = 1.5.6.5 No fix listed
git = 1.6.0 No fix listed
git = 1.6.0-rc1 No fix listed
git = 1.6.0-rc2 No fix listed
git = 1.6.0-rc3 No fix listed
git = 1.6.0.1 No fix listed
git = 1.6.0.2 No fix listed
git = 1.6.0.3 No fix listed
git = 1.6.0.4 No fix listed
git = 1.6.0.5 No fix listed

References