CVE-2008-5916
- State
- Published
- Severity
- Not scored
- Published
- Jan 21, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jan 20, 2009
Description
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- git-gitweb-privilege-escalation(47528)vdb-entry
- [oss-security] 20090120 Re: CVE request -- gitmailing-list
- 50918vdb-entry
- 33282third-party-advisory
- GLSA-200903-15vendor-advisory
- 34194third-party-advisory
- 33964third-party-advisory
- [oss-security] 20090115 CVE request -- gitmailing-list
- [linux-kernel] 20081220 [Security] gitweb local privilege escalation (fix)mailing-list
- FEDORA-2008-11650vendor-advisory
- FEDORA-2008-11653vendor-advisory
- 4922third-party-advisory
- [git] 20081220 [Security] gitweb local privilege escalation (fix)mailing-list
- USN-723-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.