7.5
CVSSv2

CVE-2008-3546

Published: 07/08/2008 Updated: 11/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT prior to 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.

Vulnerable Product Search on Vulmon Subscribe to Product

git git 1.5.5.3

git git 1.5.5.4

git git 1.5.6.3

git git 1.5.6.1

git git 1.5.6.2

Vendor Advisories

It was discovered that Git did not properly handle long file paths If a user were tricked into performing commands on a specially crafted Git repository, an attacker could possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2008-3546) ...
Multiple vulnerabilities have been identified in git-core, the core of the git distributed revision control system Improper path length limitations in git's diff and grep functions, in combination with maliciously crafted repositories or changes, could enable a stack buffer overflow and potentially the execution of arbitrary code The Common Vulne ...