CVE-2008-5517: Code Injection
Published Jan 13, 2009
·Updated
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) gitsnapshot and (2) gitobject.
Affected Software
51 affected components
Git git=1.5.0
Git git=1.5.0-rc2
Git git=1.5.0-rc3
Git git=1.5.0-rc4
Git git=1.5.0.1
Git git=1.5.0.2
Git git=1.5.0.3
Git git=1.5.0.4
Git git=1.5.0.5
Git git=1.5.0.6
Git git=1.5.0.7
Git git=1.5.1
Git git=1.5.1.1
Git git=1.5.1.2
Git git=1.5.1.3
Git git=1.5.1.4
Git git=1.5.1.5
Git git=1.5.1.6
Git git=1.5.2
Git git=1.5.2.1
Git git=1.5.2.2
Git git=1.5.2.3
Git git=1.5.2.4
Git git=1.5.2.5
Git git=1.5.3
Git git=1.5.3-rc4
Git git=1.5.3-rc5
Git git=1.5.3-rc7
Git git=1.5.3.1
Git git=1.5.3.2
Git git=1.5.3.3
Git git=1.5.3.4
Git git=1.5.3.5
Git git=1.5.3.6
Git git=1.5.3.7
Git git=1.5.3.8
Git git=1.5.4
Git git=1.5.4-rc0
Git git=1.5.4-rc1
Git git=1.5.4-rc1.1136.g2794
Git git=1.5.4-rc2
Git git=1.5.4-rc3
Git git=1.5.4-rc4
Git git=1.5.4-rc5
Git git=1.5.4.1
Git git=1.5.4.2
Git git=1.5.4.3
Git git=1.5.4.4
Git git=1.5.4.5
Git git=1.5.4.6
Git git=1.5.4.7
Remediation
Patch Available
Event History
Jan 13, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·05:00 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 12, 2024
Data Sourced
via Red Hat·12:22 PM
RemedyDescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2008-5517?
CVE-2008-5517 has a high severity level as it allows remote attackers to execute arbitrary commands.
2
How do I fix CVE-2008-5517?
To fix CVE-2008-5517, upgrade gitweb to version 1.5.6 or later to mitigate the vulnerability.
3
What versions are affected by CVE-2008-5517?
CVE-2008-5517 affects git versions 1.5.x prior to 1.5.6.
4
Can CVE-2008-5517 be exploited remotely?
Yes, CVE-2008-5517 allows remote attackers to exploit the vulnerability through the web interface.
5
What type of systems are impacted by CVE-2008-5517?
CVE-2008-5517 affects systems running affected versions of git that utilize the gitweb interface.