What’s Vulnerable › Vulnerabilities

CVE-2008-2230

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-06-11 · updated 2026-06-16
• Weakness: CWE-94

Description

Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.

Affected products

• Reportbug-Ng Reportbug: 3.8, 3.31
• Reportbug-Ng: 0.2007.03.10, 0.2007.03.11, 0.2007.03.13, 0.2007.03.14, 0.2007.03.15, 0.2007.03.17 (+33)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43001
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484311
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484474
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43001

Get alerted when CVE-2008-2230 or the next vulnerability affects your stack