Vulnerability Name: | CVE-2010-0394 (CCN-56105) | ||||||||||||||||||||
Assigned: | 2010-01-26 | ||||||||||||||||||||
Published: | 2010-01-26 | ||||||||||||||||||||
Updated: | 2017-08-17 | ||||||||||||||||||||
Summary: | PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command. | ||||||||||||||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||
CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
Vulnerability Type: | CWE-20 | ||||||||||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
References: | Source: CCN Type: Debian Bug report logs - #567039 trac-git: Arbitrary command execution Source: CONFIRM Type: UNKNOWN http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567039 Source: MITRE Type: CNA CVE-2010-0394 Source: CCN Type: Edgewall Software Web site Trac Git Plugin Source: OSVDB Type: UNKNOWN 62147 Source: SECUNIA Type: Vendor Advisory 38325 Source: DEBIAN Type: UNKNOWN DSA-1990 Source: DEBIAN Type: DSA-1990 trac-git -- shell command injection Source: CCN Type: OSVDB ID: 62147 trac-git PyGIT.py HTTP Request Arbitrary Shell Command Injection Source: BID Type: UNKNOWN 38076 Source: CCN Type: BID-38076 Trac Git Plugin Remote Command Injection Vulnerability Source: XF Type: UNKNOWN tracgit-command-execution(56105) Source: XF Type: UNKNOWN tracgit-command-execution(56105) | ||||||||||||||||||||
Vulnerable Configuration: | Configuration 1:![]() | ||||||||||||||||||||
Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
BACK |