CVE-2008-7315

CRITICAL

UI-Dialog <1.09 - Remote Code Execution

Title source: manual
STIX 2.1

Description

UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.

References (5)

Core 5
Core References
Third Party Advisory x_refsource_confirm
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448
Third Party Advisory x_refsource_confirm
https://security-tracker.debian.org/tracker/CVE-2008-7315/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/77031/info
Vendor Advisory x_refsource_confirm
https://rt.cpan.org/Public/Bug/Display.html?id=107364
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/10/08/6

Scores

CVSS v3 9.8
EPSS 0.0343
EPSS Percentile 87.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-77
Status published
Products (1)
cpan/ui\ \ dialog (31 CPE variants)
Published Oct 10, 2017
Tracked Since Feb 18, 2026