CVE-2008-7313 The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
CriticalCVSS 9.8
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libphp-snoopy(Debian:12) | < 2.0.0-1 | 2.0.0-1 |
| snoopy | All versions | No fix listed |
| redhat openstack | = 5.0 | No fix listed |
| redhat openstack | = 6.0 | No fix listed |
| nagios | <= 4.2.3 | No fix listed |
References
- Debian Security Tracker CVE-2008-7313 vendor-advisory
- snoopy.cvs.sourceforge.net patch third-party-advisory
- [oss-security] 20140709 CVE request - Snoopy incomplete fix for CVE-2008-4796 mailing-list patch third-party-advisory
- [oss-security] 20140716 Re: Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 mailing-list patch third-party-advisory
- [oss-security] 20140718 Re: CVE request - Snoopy incomplete fix for CVE-2008-4796 mailing-list patch third-party-advisory
- 68776 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch
- snoopy-cve20087313-command-exec(94737) third-party-advisory vdb-entry
- RHSA-2017:0211 patch third-party-advisory vendor-advisory
- RHSA-2017:0212 patch third-party-advisory vendor-advisory
- RHSA-2017:0213 patch third-party-advisory vendor-advisory
- RHSA-2017:0214 patch third-party-advisory vendor-advisory
- GLSA-201702-26 patch third-party-advisory vdb-entry vendor-advisory
- www-01.ibm.com third-party-advisory
- bugs.debian.org issue-tracking