CVE-2008-5916

Severity Score

4.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.

gitweb/gitweb.perl en gitweb en Git 1.6.x anteriores a v1.6.0.6, 1.5.6.x anteriores a v1.5.6.6, 1.5.5.x anteriores a v1.5.5.6, 1.5.4.x anteriores a v1.5.4.7, y otras versiones posteriores a v1.4.3 permite a los propietarios del repositorio ejecutar comandos de su elección por modificación de la configuración de la variable diff.external y ejecutando una consulta manipulada gitweb.

*Credits: N/A

CVSS Scores

NISTv2 4.6

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-01-20 CVE Reserved
2009-01-21 CVE Published
2023-03-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (14)

URL	Tag	Source
http://marc.info/?l=git&m=122975564100860&w=2	Mailing List
http://marc.info/?l=linux-kernel&m=122975564100863&w=2:	Mailing List
http://osvdb.org/50918	Vdb Entry
http://secunia.com/advisories/33282	Third Party Advisory
http://secunia.com/advisories/33964	Third Party Advisory
http://secunia.com/advisories/34194	Third Party Advisory
http://securityreason.com/securityalert/4922	Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/01/15/2	Mailing List
http://www.openwall.com/lists/oss-security/2009/01/20/2	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/47528	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.gentoo.org/security/en/glsa/glsa-200903-15.xml	2017-08-08
http://www.ubuntu.com/usn/USN-723-1	2017-08-08
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01169.html	2017-08-08
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01170.html	2017-08-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.3.1 Search vendor "Git" for product "Git" and version "1.4.3.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.3.2 Search vendor "Git" for product "Git" and version "1.4.3.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.3.3 Search vendor "Git" for product "Git" and version "1.4.3.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.3.4 Search vendor "Git" for product "Git" and version "1.4.3.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.3.5 Search vendor "Git" for product "Git" and version "1.4.3.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.4 Search vendor "Git" for product "Git" and version "1.4.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.4.1 Search vendor "Git" for product "Git" and version "1.4.4.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.4.2 Search vendor "Git" for product "Git" and version "1.4.4.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.4.3 Search vendor "Git" for product "Git" and version "1.4.4.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.4.4.4 Search vendor "Git" for product "Git" and version "1.4.4.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0 Search vendor "Git" for product "Git" and version "1.5.0"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0 Search vendor "Git" for product "Git" and version "1.5.0"		rc2		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0 Search vendor "Git" for product "Git" and version "1.5.0"		rc3		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0 Search vendor "Git" for product "Git" and version "1.5.0"		rc4		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.1 Search vendor "Git" for product "Git" and version "1.5.0.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.2 Search vendor "Git" for product "Git" and version "1.5.0.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.3 Search vendor "Git" for product "Git" and version "1.5.0.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.4 Search vendor "Git" for product "Git" and version "1.5.0.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.5 Search vendor "Git" for product "Git" and version "1.5.0.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.6 Search vendor "Git" for product "Git" and version "1.5.0.6"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.0.7 Search vendor "Git" for product "Git" and version "1.5.0.7"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1 Search vendor "Git" for product "Git" and version "1.5.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1.1 Search vendor "Git" for product "Git" and version "1.5.1.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1.2 Search vendor "Git" for product "Git" and version "1.5.1.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1.3 Search vendor "Git" for product "Git" and version "1.5.1.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1.4 Search vendor "Git" for product "Git" and version "1.5.1.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1.5 Search vendor "Git" for product "Git" and version "1.5.1.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.1.6 Search vendor "Git" for product "Git" and version "1.5.1.6"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.2 Search vendor "Git" for product "Git" and version "1.5.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.2.1 Search vendor "Git" for product "Git" and version "1.5.2.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.2.2 Search vendor "Git" for product "Git" and version "1.5.2.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.2.3 Search vendor "Git" for product "Git" and version "1.5.2.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.2.4 Search vendor "Git" for product "Git" and version "1.5.2.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.2.5 Search vendor "Git" for product "Git" and version "1.5.2.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3 Search vendor "Git" for product "Git" and version "1.5.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3 Search vendor "Git" for product "Git" and version "1.5.3"		rc4		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3 Search vendor "Git" for product "Git" and version "1.5.3"		rc5		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3 Search vendor "Git" for product "Git" and version "1.5.3"		rc7		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.1 Search vendor "Git" for product "Git" and version "1.5.3.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.2 Search vendor "Git" for product "Git" and version "1.5.3.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.3 Search vendor "Git" for product "Git" and version "1.5.3.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.4 Search vendor "Git" for product "Git" and version "1.5.3.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.5 Search vendor "Git" for product "Git" and version "1.5.3.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.6 Search vendor "Git" for product "Git" and version "1.5.3.6"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.7 Search vendor "Git" for product "Git" and version "1.5.3.7"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.3.8 Search vendor "Git" for product "Git" and version "1.5.3.8"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc0		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc1		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc1.1136.g2794		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc2		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc3		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc4		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4 Search vendor "Git" for product "Git" and version "1.5.4"		rc5		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4.1 Search vendor "Git" for product "Git" and version "1.5.4.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4.2 Search vendor "Git" for product "Git" and version "1.5.4.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4.3 Search vendor "Git" for product "Git" and version "1.5.4.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4.4 Search vendor "Git" for product "Git" and version "1.5.4.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4.5 Search vendor "Git" for product "Git" and version "1.5.4.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.4.6 Search vendor "Git" for product "Git" and version "1.5.4.6"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5 Search vendor "Git" for product "Git" and version "1.5.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5 Search vendor "Git" for product "Git" and version "1.5.5"		rc1		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5 Search vendor "Git" for product "Git" and version "1.5.5"		rc2		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5 Search vendor "Git" for product "Git" and version "1.5.5"		rc3		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5.1 Search vendor "Git" for product "Git" and version "1.5.5.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5.2 Search vendor "Git" for product "Git" and version "1.5.5.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5.3 Search vendor "Git" for product "Git" and version "1.5.5.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5.3 Search vendor "Git" for product "Git" and version "1.5.5.3"		r1		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5.4 Search vendor "Git" for product "Git" and version "1.5.5.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.5.5 Search vendor "Git" for product "Git" and version "1.5.5.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.6 Search vendor "Git" for product "Git" and version "1.5.6"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.6.1 Search vendor "Git" for product "Git" and version "1.5.6.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.6.2 Search vendor "Git" for product "Git" and version "1.5.6.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.6.3 Search vendor "Git" for product "Git" and version "1.5.6.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.6.4 Search vendor "Git" for product "Git" and version "1.5.6.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.5.6.5 Search vendor "Git" for product "Git" and version "1.5.6.5"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0 Search vendor "Git" for product "Git" and version "1.6.0"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0 Search vendor "Git" for product "Git" and version "1.6.0"		rc1		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0 Search vendor "Git" for product "Git" and version "1.6.0"		rc2		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0 Search vendor "Git" for product "Git" and version "1.6.0"		rc3		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0.1 Search vendor "Git" for product "Git" and version "1.6.0.1"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0.2 Search vendor "Git" for product "Git" and version "1.6.0.2"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0.3 Search vendor "Git" for product "Git" and version "1.6.0.3"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0.4 Search vendor "Git" for product "Git" and version "1.6.0.4"		-		Affected
Git Search vendor "Git"		Git Search vendor "Git" for product "Git"				1.6.0.5 Search vendor "Git" for product "Git" and version "1.6.0.5"		-		Affected