CVEvulnerability
CVE-2008-4796
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
Affected configurations
• snoopy project snoopy (<= 1.2.3)
• debian debian linux 4.0
• debian debian linux 5.0
• nagios nagios (< 4.2.2)
• wordpress wordpress (< 2.6.3)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
Referenced by CWE · observed example (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://jvn.jp/en/jp/JVN20502807/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000074.html Third Party Advisory, VDB Entry
- http://secunia.com/advisories/32361 Third Party Advisory
- http://sourceforge.net/forum/forum.php?forum_id=879959 Broken Link, Patch, Third Party Advisory
- http://www.debian.org/security/2008/dsa-1691 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1871 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/11/01/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/496068/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/31887 Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2901 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46068 Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201702-26 Third Party Advisory
- https://www.nagios.org/projects/nagios-core/history/4x/ Third Party Advisory
- http://jvn.jp/en/jp/JVN20502807/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000074.html Third Party Advisory, VDB Entry
- http://secunia.com/advisories/32361 Third Party Advisory
- http://sourceforge.net/forum/forum.php?forum_id=879959 Broken Link, Patch, Third Party Advisory
- http://www.debian.org/security/2008/dsa-1691 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1871 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/11/01/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/496068/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/31887 Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2901 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46068 Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201702-26 Third Party Advisory
- https://www.nagios.org/projects/nagios-core/history/4x/ Third Party Advisory