suse · CVE-2008-4796

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2008-4796 severity moderate: SUSE including 9 source package names (nagios, nagios-4.4.6-2.5, …), 14 product×package rows across 6 product lines (SUSE Linux Enterprise Server 11 SP1 for Teradata, SUSE Linux Enterprise Server 11 SP3 for Teradata, … (6 product lines)): Known Not Affected 8, Fixed 6.

Description:

The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.