CVE-2008-0932

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-25 · updated 2026-06-16
Weakness: CWE-20

Description

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

Affected products

The Sword Project Diatheke Front End: through 1.5.9
The Sword Project Sword: through 1.5.9

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=466449
http://secunia.com/advisories/25400
http://secunia.com/advisories/29012
http://secunia.com/advisories/29115
http://secunia.com/advisories/29181
http://security.gentoo.org/glsa/glsa-200803-06.xml
http://www.debian.org/security/2008/dsa-1508
http://www.securityfocus.com/bid/27874
http://www.securityfocus.com/bid/27987
http://www.vupen.com/english/advisories/2008/0670/references
https://bugzilla.redhat.com/show_bug.cgi?id=433723
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html

Get alerted when CVE-2008-0932 or the next vulnerability affects your stack