CVE-2008-2275: Code Injection

Published May 16, 2008

Updated

Unspecified vulnerability in srfeuserregister 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors.

Affected Software

20 affected components

Typo3 Sr Feuser Register Extension=2.5.7

Typo3 Sr Feuser Register Extension=2.4.0

Typo3 Sr Feuser Register Extension=2.2.1

Typo3 Sr Feuser Register Extension=2.2.2

Typo3 Sr Feuser Register Extension=2.2.7

Typo3 Sr Feuser Register Extension=1.6.0

Typo3 Sr Feuser Register Extension=2.2.4

Typo3 Sr Feuser Register Extension=1.4.0

Typo3 Sr Feuser Register Extension=2.2.5

Typo3 Sr Feuser Register Extension=2.5.6

Typo3 Sr Feuser Register Extension=2.2.3

Typo3 Sr Feuser Register Extension=2.5.0

Typo3 Sr Feuser Register Extension=2.5.1

Typo3 Sr Feuser Register Extension=2.5.8

Typo3 Sr Feuser Register Extension=2.5.3

Typo3 Sr Feuser Register Extension=2.5.4

Typo3 Sr Feuser Register Extension=2.5.9

Typo3 Sr Feuser Register Extension=2.2.6

Typo3 Sr Feuser Register Extension=2.5.2

Typo3 Sr Feuser Register Extension=2.5.5

Remediation

Patch Available

http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/

Event History

May 16, 2008

CVE Published

via MITRE·06:54 AM

Data Sourced

via MITRE·06:54 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2275?

The severity of CVE-2008-2275 has been classified as critical due to its potential to allow remote code execution.

How do I fix CVE-2008-2275?

To fix CVE-2008-2275, update the sr_feuser_register extension to a patched version that addresses the vulnerability.

Which TYPO3 versions are affected by CVE-2008-2275?

CVE-2008-2275 affects TYPO3 sr_feuser_register versions 1.4.0 through 2.5.9.

What types of attacks does CVE-2008-2275 allow?

CVE-2008-2275 allows remote attackers to execute arbitrary code and delete files on the server.

Is CVE-2008-2275 being actively exploited?

While specific instances of exploitation may vary, vulnerabilities like CVE-2008-2275 can attract malicious activity, making it important to secure affected installations.