RCE in Alain Barbet Filesys Smbclientparser
CVE-2008-3285
The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a folder name containing shell metacharacters.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.
Affected products
- Alain_barbet Filesys_smbclientparser — versions 2.1, 2.2, 2.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)