PT-2009-2406 · Jabber · Exodus

Publicado 2009-08-11 · Atualizado 2017-08-17 · CVE-2008-6937

NVD

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-6937

Produtos afetados

Exodus

Referências · 5

• 🔥 https://exploit-db.com/exploits/7167 · Exploit
• 🔥 https://exploit-db.com/exploits/7145 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6937 · Nota de Segurança
• http://secunia.com/advisories/32729 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52631 · Nota