CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

Link	Resource
http://www.awe.com/mark/blog/200804272230.html
http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3
http://www.securityfocus.com/bid/28968
http://secunia.com/advisories/29995	Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html
http://secunia.com/advisories/30189
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/42046

Configuration 1

cpe:2.3:a:zoneminder:zoneminder:1.21.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.23.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.23.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.19.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.19.4:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.11:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.21.3:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.21.2:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.8:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.10:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.18.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.21.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.9:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.14:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.22.2:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.19.3:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.0.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.20.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.17.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.22.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.22.3:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.16:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.13:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.19.5:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.18.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.23.2:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.17.2:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.21.4:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.12:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.22.1:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.19.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.7:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.17.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.20.0:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:1.19.2:*:*:*:*:*:*:* cpe:2.3:a:zoneminder:zoneminder:0.9.15:*:*:*:*:*:*:*

---

Published : 2008-05-01 07:05

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1381

Mitre link : CVE-2008-1381

No products.

CWE-94