critical9.3Public exploit code
CVE-2008-5705
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- verlihub 0.9.8d-RC2 - Remote Command Execution2008-11-21 · remote · linux · Verified
Impact
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user triggers are enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in an argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Verlihub-Project | Verlihub | Version 0.9.8d |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/506530
- http://openwall.com/lists/oss-security/2008/12/17/16
- http://securityreason.com/securityalert/4800
- http://www.securityfocus.com/bid/32420
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46801
- https://www.exploit-db.com/exploits/7183
- http://bugs.debian.org/506530
- http://openwall.com/lists/oss-security/2008/12/17/16
- http://securityreason.com/securityalert/4800
- http://www.securityfocus.com/bid/32420
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46801
- https://www.exploit-db.com/exploits/7183