CVE-2008-4796: debian debian_linux OS Command Injection
CVSS: 10.0v2.0HighModified
AliasesDEBIAN-CVE-2008-4796
Published 30-10-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-4796 is a high (CVSS 10.0) OS Command Injection vulnerability in debian debian_linux. EPSS estimates a 8.98% chance of exploitation in the next 30 days, higher than 95.2% of scored vulnerabilities.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
8.98%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 1Timeline
- 30-10-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
CVSS metrics
1 score · 1 source · 1 versionHigh 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
8.98%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 8.98% on 19-09-2026
19-09-202619-10-2026
EPSS score8.98%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian3 products
- libphp-snoopy< 1.2.4-1
- wordpress< 2.5.1-9
- debian_linuxEOL4.0 | 5.0
Nagios1 product
- nagios< 4.2.2
Snoopy_project1 product
- snoopy≤ 1.2.3
Wordpress1 product
- wordpress< 2.6.3
4 vendors · 6 products
References
14 links- www.securityfocus.com/archive/1/496068/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- sourceforge.net/forum/forum.php?forum_id=879959X Refsource CONFIRMBroken LinkPatchThird Party Advisory