CVE-2008-6499: Code Injection
Published Mar 20, 2009
·Updated
security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTEADDR variable to 127.0.0.1.
Affected Software
1 affected component
Apachefriends Xampp=1.6.8
Event History
Mar 20, 2009
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6499?
CVE-2008-6499 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2008-6499?
To fix CVE-2008-6499, it is recommended to upgrade XAMPP to a version higher than 1.6.8.
3
What software is affected by CVE-2008-6499?
CVE-2008-6499 specifically affects XAMPP version 1.6.8.
4
What type of attack is associated with CVE-2008-6499?
CVE-2008-6499 allows remote attackers to spoof critical variables, including the REMOTE_ADDR variable.
5
Is CVE-2008-6499 a local or remote vulnerability?
CVE-2008-6499 is considered a remote vulnerability.