CVE-2008-1136

Published: 04/03/2008 Updated: 11/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The Utils::runScripts function in src/utils.cpp in vdccm 0.92 up to and including 0.10.0 in SynCE (SynCE-dccm) allows remote malicious users to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679.

Vulnerable Product	Search on Vulmon	Subscribe to Product
synce synce 0.10.0
synce synce 0.92

source: wwwsecurityfocuscom/bid/27178/info SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data Attackers can exploit this issue to execute arbitrary commands in the context of the application, facilitating the remote compromise of affected computers SynCE 092 is ...

CWE-94 CWE-20 http://www.coresecurity.com/?action=item&id=2070 http://sourceforge.net/forum/forum.php?forum_id=766440 http://www.securityfocus.com/bid/27178 http://secunia.com/advisories/29228 https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html http://secunia.com/advisories/29285 http://www.securityfocus.com/bid/28141 http://securityreason.com/securityalert/3710 https://exchange.xforce.ibmcloud.com/vulnerabilities/39506 http://www.securityfocus.com/archive/1/485884/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30998/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1136

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect