Published: 17/12/2008 Updated: 11/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer prior to 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote malicious users to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

Vulnerable Product	Search on Vulmon	Subscribe to Product
roundcube webmail 0.2.1
roundcube webmail 0.2.3

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user (CVE-2007-3215) ...

#!/bin/sh # # I was hoping the PoC would not appear so soon, # but now that it is out, # i thought i might as well publish my real exploit # # Hunger # # # cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2008-5619 # # FOR LEARNING PURPOSES ONLY! # # PHP> echo(ini_get('disable_functions')); # # exec, system # # PHP> passthru("id; uname -a") ...

Public Release Date of POC: 2008-12-22 Author: Jacobo Avariento Gimeno (Sofistic) CVE id: CVE-2008-5619 Bugtraq id: 32799 Severity: Critical Vulnerability reported by: RealMurphy Intro ---- Roundcube Webmail is a browser-based IMAP client that uses "chuggnuttcom HTML to Plain Text Conversion" library to convert HTML text to plain text, this libr ...

RoundCube Webmail versions 02b and below remote code execution exploit ...

RoundCube Webmail versions 02-3 Beta and below suffer from a remote code execution vulnerability ...

CWE-94 http://sourceforge.net/forum/forum.php?forum_id=898542 https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html http://trac.roundcube.net/changeset/2148 http://www.openwall.com/lists/oss-security/2008/12/12/1 http://secunia.com/advisories/33170 https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html http://trac.roundcube.net/ticket/1485618 http://secunia.com/advisories/33145 http://secunia.com/advisories/34789 http://mahara.org/interaction/forum/topic.php?id=533 http://osvdb.org/53893 http://www.vupen.com/english/advisories/2008/3419 http://www.vupen.com/english/advisories/2008/3418 https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a https://www.exploit-db.com/exploits/7553 https://www.exploit-db.com/exploits/7549 http://www.securityfocus.com/archive/1/499489/100/0/threaded https://usn.ubuntu.com/791-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/7553/

CVE-2008-5619

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect