VulnerabilityModified
CVE-2008-1136
The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679.
HIGH 9.3EPSS 6.78%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.78%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 6.78% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-94
- Affected
- synce/synce
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/29228
- http://secunia.com/advisories/29285
- http://securityreason.com/securityalert/3710
- http://sourceforge.net/forum/forum.php?forum_id=766440
- http://www.coresecurity.com/?action=item&id=2070
- http://www.securityfocus.com/archive/1/485884/100/0/threaded
- http://www.securityfocus.com/bid/27178Exploit
- http://www.securityfocus.com/bid/28141
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39506
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html
- http://secunia.com/advisories/29228
- http://secunia.com/advisories/29285
- http://securityreason.com/securityalert/3710
- http://sourceforge.net/forum/forum.php?forum_id=766440
- http://www.coresecurity.com/?action=item&id=2070
- http://www.securityfocus.com/archive/1/485884/100/0/threaded
- http://www.securityfocus.com/bid/27178Exploit
- http://www.securityfocus.com/bid/28141
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39506
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.