CVE-2008-3907
newsbeuter - command injection
EPSS 0.73%
Description
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.
How to fix CVE-2008-3907
To remediate CVE-2008-3907, upgrade the affected package to a fixed version below.
- Debian/newsbeuter—upgrade to 1.2-1 or later
- Debian/newsbeuter—upgrade to 0.9.1-1+lenny2 or later
- Debian/newsbeuter—upgrade to 0.9.1-1+lenny3 or later
Is CVE-2008-3907 being exploited?
Low — EPSS is 0.7%, meaning exploitation activity has not been observed at scale.
Affected packages (3)
- from 0, < 1.2-1
- from 0, < 0.9.1-1+lenny2
- from 0, < 0.9.1-1+lenny3