PT-2008-4735 · Links · Links

Publicado 2008-07-27 · Atualizado 2017-08-08 · CVE-2008-3329

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Links versions prior to 2.1

Description The issue is related to providing URLs to external programs when the "only proxies" option is enabled. It has an unknown impact and attack vectors.

Recommendations For versions prior to 2.1, consider disabling the "only proxies" option as a temporary workaround until a patch is available. Restrict access to external programs that receive URLs from Links to minimize the risk of exploitation.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2008-3329

Produtos afetados

Links

Referências · 7

• https://osv.dev/vulnerability/CVE-2008-3329 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-3329 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3329 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3329 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44035 · Nota
• http://securityfocus.com/bid/30422 · Nota
• http://links.twibright.com/download/ChangeLog · Nota