CVE-2008-1381

Description

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.

References

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00085.html

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00078.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/42046

http://www.zoneminder.com/wiki/index.php/Change_History#Release_1.23.3

http://www.securityfocus.com/bid/28968

http://www.awe.com/mark/blog/200804272230.html

http://secunia.com/advisories/30189

http://secunia.com/advisories/29995

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3