CVE-2008-7196 : Unspecified vulnerability in metashell before 0.03 has unknown impact and attack

Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution security flaw," possibly an untrusted search path vulnerability.

Published 2009-09-10 10:30:02

Updated 2009-09-10 10:30:02

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2008-7196

Mark Reinsfelder » Metashell
Versions up to, including, (<=) 0.02b
cpe:2.3:a:mark_reinsfelder:metashell:*:*:*:*:*:*:*:*
Matching versions
Mark Reinsfelder » Metashell » Version: 0.01b
cpe:2.3:a:mark_reinsfelder:metashell:0.01b:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-7196

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-7196

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2008-7196

http://archives.neohapsis.com/archives/apps/freshmeat/2008-01/0032.html

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2008-7196

Products affected by CVE-2008-7196

Exploit prediction scoring system (EPSS) score for CVE-2008-7196

CVSS scores for CVE-2008-7196

References for CVE-2008-7196