CVE-2008-0892
published 2008-04-16CVE-2008-0892: The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote…
PriorityP355critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
14.02%
96.1th percentile
The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | directory_server | — | — |
| redhat | directory_server | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_redhat9.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Server: shell command injection in CGI replication monitor
vendor_redhat·2008-04-15·CVSS 9.0
CVE-2008-0892 [CRITICAL] CWE-78 Server: shell command injection in CGI replication monitor
Server: shell command injection in CGI replication monitor
The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
GHSA
GHSA-cg2c-3gw3-2vcg: The replication monitor CGI script (repl-monitor-cgi
ghsa_unreviewed·2022-05-01
CVE-2008-0892 [HIGH] CWE-20 GHSA-cg2c-3gw3-2vcg: The replication monitor CGI script (repl-monitor-cgi
The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands.
No detection rules found.
No public exploits indexed.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676http://secunia.com/advisories/29761http://secunia.com/advisories/29826http://secunia.com/advisories/30114http://www.redhat.com/support/errata/RHSA-2008-0199.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0201.htmlhttp://www.securityfocus.com/bid/28802http://www.securitytracker.com/id?1019856http://www.vupen.com/english/advisories/2008/1449/referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=437301https://exchange.xforce.ibmcloud.com/vulnerabilities/41840https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.htmlhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676http://secunia.com/advisories/29761http://secunia.com/advisories/29826http://secunia.com/advisories/30114http://www.redhat.com/support/errata/RHSA-2008-0199.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0201.htmlhttp://www.securityfocus.com/bid/28802http://www.securitytracker.com/id?1019856http://www.vupen.com/english/advisories/2008/1449/referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=437301https://exchange.xforce.ibmcloud.com/vulnerabilities/41840https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html
2008-04-16
Published