gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-01-21T02:00:00

Updated: 2024-08-07T11:13:13.759Z

Reserved: 2009-01-20T00:00:00

Link: CVE-2008-5916

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2009-01-21T02:30:00.203

Modified: 2024-11-21T00:55:12.250

Link: CVE-2008-5916

cve-icon Redhat

No data.