CVE-2008-1688

Published Apr 9, 2008

Last updated 7 years ago

Overview

Description: Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Vendor comments

Red HatRed Hat does not consider this to be a security issue. After careful analysis of this issue the Red Hat Security Response Team has determined that this bug has no security impact outside of expected m4 behavior.

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5157211A-80A7-4694-9D45-E1C4CA9DA2C6"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2E10A3A6-8DC0-4BFD-8C4F-4B6B7C5EC03B"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77C4D372-B593-4AF4-A2C1-A5F1657B28EE"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "964FCBD7-B697-4D9A-AD73-F5ED3631FBB4"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BE99BE1-1956-41DB-8E9C-684D3040CEAC"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "96348B9C-BB73-404D-8A68-0A96B793BC3D"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4F6DD41B-D8EF-4D1E-B939-9CB0D85D8217"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C62D0160-F302-43A4-A244-DFD92BC9FD49"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "886BBA7D-DE20-4A47-9896-E71BA25E9205"
          },
          {
            "criteria": "cpe:2.3:a:gnu:m4:1.4.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3AF0E0A6-401D-4306-88EC-5FFD207C39BF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Vendor comments

Configurations

References