PT-2009-2406 · Jabber · Exodus

Published 2009-08-11 · Updated 2017-08-17 · CVE-2008-6937

NVD

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-6937

Affected Products

Exodus

References · 5

• 🔥 https://exploit-db.com/exploits/7167 · Exploit
• 🔥 https://exploit-db.com/exploits/7145 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6937 · Security Note
• http://secunia.com/advisories/32729 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52631 · Note