CVE-2008-4304

{"id": "CVE-2008-4304", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-12-23T18:30:03.250", "references": [{"url": "http://bugs.gentoo.org/show_bug.cgi?id=235052", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/33258", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://security.gentoo.org/glsa/glsa-200812-20.xml", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/32964", "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47522", "source": "secalert@redhat.com"}, {"url": "http://bugs.gentoo.org/show_bug.cgi?id=235052", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/33258", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://security.gentoo.org/glsa/glsa-200812-20.xml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/32964", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47522", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells."}, {"lang": "es", "value": "general/login.php en phpCollab 2.5 rc3 y anteriores, permiten a atacantes remotos ejecutar comandos arbitrarios a trav\u00e9s de metacaracteres shell en entradas no espec\u00edficas, relacionadas con la variable de entorno SSL_CLIENT_CERT. NOTA, en algunos entornos, SSL_CLIENT_CERT siempre tiene valor de cadena codificado en base 64, lo cual impone limitaciones a la inyecci\u00f3n para shells t\u00edpicas."}], "lastModified": "2024-11-21T00:51:20.920", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phpcollab:phpcollab:*:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "306A4BD2-EDA5-4C5C-9EDF-4A30002835C9", "versionEndIncluding": "2.5"}, {"criteria": "cpe:2.3:a:phpcollab:phpcollab:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FEB4154-4FBA-439C-85B6-02EAAD97DCC2"}, {"criteria": "cpe:2.3:a:phpcollab:phpcollab:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2E0172B-98CB-4777-A388-E9B0AB09A655"}, {"criteria": "cpe:2.3:a:phpcollab:phpcollab:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82E3645C-2A9B-4F9D-B8FC-EFABB5550706"}, {"criteria": "cpe:2.3:a:phpcollab:phpcollab:2.5:beta_4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D35D5533-5262-4A52-80E2-40A2AAC1F52F"}, {"criteria": "cpe:2.3:a:phpcollab:phpcollab:2.5:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5C6C16C-9DC9-45C6-AA12-8A6B73F018ED"}, {"criteria": "cpe:2.3:a:phpcollab:phpcollab:2.5:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A23D06B-FB8A-42CC-B3B6-F720A2D892EE"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}