CVE-2008-7313

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-31 · updated 2026-06-16
Weakness: CWE-77

Description

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

Affected products

Nagios Enterprises nagios: through 4.2.3
OpenStack: 5.0, 6.0
Snoopy: all versions

References

http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.27
http://www.openwall.com/lists/oss-security/2014/07/09/11
http://www.openwall.com/lists/oss-security/2014/07/16/10
http://www.openwall.com/lists/oss-security/2014/07/18/2
http://www.securityfocus.com/bid/68776
https://bugzilla.redhat.com/show_bug.cgi?id=1121497
https://exchange.xforce.ibmcloud.com/vulnerabilities/94737
https://rhn.redhat.com/errata/RHSA-2017-0211.html
https://rhn.redhat.com/errata/RHSA-2017-0212.html
https://rhn.redhat.com/errata/RHSA-2017-0213.html
https://rhn.redhat.com/errata/RHSA-2017-0214.html
https://security.gentoo.org/glsa/201702-26

Get alerted when CVE-2008-7313 or the next vulnerability affects your stack