Unscored CVE-2008-7315 EUVD-2008-7266GHSA-3f84-j5xw-c967

UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.

Published Oct 10, 2017 · Updated Aug 7, 2024 · Assigned by mitre

Package: libui-dialog-perl Package: libui-dialog-perl Ecosystem: Debian Ecosystem: Ubuntu

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libui-dialog-perl	1.21-0.1	—
Debian 13	libui-dialog-perl	1.21-0.1	—
Debian 12	libui-dialog-perl	1.21-0.1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	libui-dialog-perl	No fix yet	—

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448
https://security-tracker.debian.org/tracker/CVE-2008-7315/
77031 vdb-entry
https://rt.cpan.org/Public/Bug/Display.html?id=107364
[oss-security] 20151008 Re: CVE request - perl library UI:Dialog 1.09 - shell escaping vulnerability mailing-list