CVEvulnerability

CVE-2008-1319

9.3 HIGH Published 2008-03-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.

Affected configurations

• versant versant object database (<= 7.0.1.3) • versant versant object database 7.0.1

Related

Referenced by CWE · observed example (2)

  • CWE-426 Untrusted Search Path weakness
  • CWE-642 External Control of Critical State Data weakness

References