What is CVE-2008-6937?

CVE-2008-6937 is a vulnerability in Jabber Exodus, classified under Code Injection. Published 2009-08-11.

Is CVE-2008-6937 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Jabber Exodus

CVE-2008-6937

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.032 (86.9th percentile) — read the EPSS interpretation.

Affected products

Jabber Exodus — versions 0.10
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2008-6937?: CVE-2008-6937 is a vulnerability in Jabber Exodus, classified under Code Injection. Published 2009-08-11.
Is CVE-2008-6937 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.