CVE-2008-1319

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 4.8%

exploitation probability

4.8%top 9% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/5213

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aluigi.altervista.org/adv/versantcmd-adv.txt http://marc.info/?l=bugtraq&m=120468784112145&w=2 http://secunia.com/advisories/29230 http://securityreason.com/securityalert/3738 https://exchange.xforce.ibmcloud.com/vulnerabilities/40997 https://www.exploit-db.com/exploits/5213 http://www.securityfocus.com/archive/1/489139/100/0/threaded http://www.securityfocus.com/bid/28097 http://www.vupen.com/english/advisories/2008/0764/references