CVE-2008-1381
CVE-2008-1381
This page contains facts from public vulnerability sources. Check the original advisory before updating.
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.
EPSS 2.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zoneminder Debian:12
- Affected ranges
- ECOSYSTEM: < 1.23.3-1
Update to 1.23.3-1
zoneminder Debian:13
- Affected ranges
- ECOSYSTEM: < 1.23.3-1
Update to 1.23.3-1
zoneminder Debian:14
- Affected ranges
- ECOSYSTEM: < 1.23.3-1
Update to 1.23.3-1
Original sources
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html
- http://www.securityfocus.com/bid/28968
- http://www.awe.com/mark/blog/200804272230.html
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html
- http://secunia.com/advisories/29995
- http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42046
- http://secunia.com/advisories/30189
- https://nvd.nist.gov/vuln/detail/CVE-2008-1381