high7.5
CVE-2008-1381
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via she…
Impact
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zoneminder | Zoneminder | Versions 0.0.1, 0.9.7, 0.9.8, 0.9.9, 0.9.10, 0.9.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29995
- http://secunia.com/advisories/30189
- http://www.awe.com/mark/blog/200804272230.html
- http://www.securityfocus.com/bid/28968
- http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42046
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html
- http://secunia.com/advisories/29995
- http://secunia.com/advisories/30189
- http://www.awe.com/mark/blog/200804272230.html
- http://www.securityfocus.com/bid/28968
- http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42046
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html