CVE-2005-3330: Input Validation
The httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3330?
CVE-2005-3330 is considered a critical vulnerability due to the potential for command execution by remote attackers.
How do I fix CVE-2005-3330?
To mitigate CVE-2005-3330, update the Snoopy library to a version that is not affected or apply relevant patches.
What types of software are affected by CVE-2005-3330?
CVE-2005-3330 affects multiple software products including MagpieRSS, WordPress, Ampache, and Jinzora that use Snoopy 1.2.
Can CVE-2005-3330 lead to a complete system compromise?
Yes, CVE-2005-3330 can allow an attacker to execute arbitrary commands, which may lead to complete system compromise.
Is CVE-2005-3330 still a threat in modern applications?
While many applications have been updated, CVE-2005-3330 remains a threat in legacy systems that still utilize the vulnerable version of Snoopy.