CVE-2007-2355 : The get_url function in DODS_Dispatch.pm for the CGI

The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Published 2007-04-30 22:19:00

Updated 2017-07-29 01:31:24

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-2355

Opendap » Server3 » Version: 3.2.10
cpe:2.3:a:opendap:server3:3.2.10:*:*:*:*:*:*:*
Matching versions
Opendap » Server3 » Version: 3.7.4
cpe:2.3:a:opendap:server3:3.7.4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-2355

EPSS FAQ

4.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2355

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-2355

Jump to

Vulnerability Details : CVE-2007-2355

Products affected by CVE-2007-2355

Exploit prediction scoring system (EPSS) score for CVE-2007-2355

CVSS scores for CVE-2007-2355

References for CVE-2007-2355