Vulnerability CVE-2008-2064

Vulnerability Name:

CVE-2008-2064 (CCN-42085)

Assigned:

2008-04-29

Published:

2008-04-29

Updated:

2017-08-08

Summary:

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems."

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2008-2064

Source: CCN
Type: SA29989
PhpGedView Unspecified Vulnerability

Source: SECUNIA
Type: Vendor Advisory
29989

Source: SECUNIA
Type: Vendor Advisory
30256

Source: CCN
Type: SourceForge.net: Files
PhpGedView, File Release Notes and Changelog, Release Name: PhpGedView v4.1.5

Source: CONFIRM
Type: Patch
http://sourceforge.net/project/shownotes.php?group_id=55456&release_id=595222

Source: DEBIAN
Type: Patch
DSA-1580

Source: DEBIAN
Type: DSA-1580
phpgedview -- programming error

Source: CCN
Type: OSVDB ID: 44667
PhpGedView Unspecified Error Arbitrary Remote Code Execution

Source: CCN
Type: PhpGedView Web page
PhpGedView

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.phpgedview.net/

Source: BID
Type: UNKNOWN
28978

Source: CCN
Type: BID-28978
PhpGedView Unspecified Remote Vulnerability

Source: XF
Type: UNKNOWN
phpgedview-unspecified-code-execution(42085)

Source: XF
Type: UNKNOWN
phpgedview-unspecified-code-execution(42085)

Vulnerable Configuration:

Configuration 1:

cpe:/a:phpgedview:phpgedview:0.6:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:0.8:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:0.95:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:1.0:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:1.1:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:1.04:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:2.0:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:2.12:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:2.13:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:2.50:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:3.0:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:3.2:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:3.3.8:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:4.0:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:4.1.1:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:4.1.3:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:*:*:*:*:*:*:*:* (Version <= 4.1.4)

Configuration CCN 1:

cpe:/a:phpgedview:phpgedview:4.1.1:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:4.1.4:*:*:*:*:*:*:*

OR cpe:/a:phpgedview:phpgedview:0.6:*:*:*:*:*:*:*