CVE-2005-3330

Description

The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.

References

https://svn.ampache.org/branches/3.3.1/docs/CHANGELOG

https://exchange.xforce.ibmcloud.com/vulnerabilities/22874

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-3329

http://www.vupen.com/english/advisories/2005/2727

http://www.vupen.com/english/advisories/2005/2335

http://www.vupen.com/english/advisories/2005/2202

http://www.securityfocus.com/bid/15213

http://www.osvdb.org/20316

http://sourceforge.net/project/shownotes.php?release_id=375385

http://sourceforge.net/project/shownotes.php?release_id=368750

http://securitytracker.com/id?1015104

http://securityreason.com/securityalert/117

http://secunia.com/advisories/17887

http://secunia.com/advisories/17779

http://secunia.com/advisories/17455

http://secunia.com/advisories/17330

http://marc.info/?l=bugtraq&m=113062897231412&w=2

http://marc.info/?l=bugtraq&m=113028858316430&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS