CVE-2008-3907

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/09/01/4
http://www.newsbeuter.org/downloads/CHANGES
http://www.securityfocus.com/bid/30964
http://secunia.com/advisories/31676	Vendor Advisory
http://secunia.com/advisories/31995
http://security.gentoo.org/glsa/glsa-200809-12.xml
http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/
https://exchange.xforce.ibmcloud.com/vulnerabilities/44791

Configuration 1

cpe:2.3:a:newsbeuter:newsbeuter:0.5:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.2:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.8:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.4:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:*:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.9:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.1.1:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.8.1:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.8.2:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.7:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.3:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.6:*:*:*:*:*:*:* cpe:2.3:a:newsbeuter:newsbeuter:0.9.1:*:*:*:*:*:*:*

---

Published : 2008-09-04 05:41

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3907

Mitre link : CVE-2008-3907

No products.

CWE-20