Unscored DSA-1708-1 3 CVEs

git-core - remote code execution

Published Jan 19, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	git-core	1:1.4.4.4-4+etch1

Vulnerabilities 3

Unscored —

CVE-2008-5516

The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell me…

Jan 20, 2009
Unscored —

CVE-2008-5517 Public exploit EPSS 12%

The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell me…

Jan 13, 2009
Unscored —

CVE-2008-5916

gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x befor…

Jan 21, 2009