CVE-2008-1319 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 4.8% (pctl 92)
Patch early
A public exploit exists.
Description
Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 4.8% — more likely to be exploited than 92% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-03-13 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| versant | versant object database |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Versant Object Database 7.0.1.3 - Commands Execution | 2008-03-04 |
References
- http://aluigi.altervista.org/adv/versantcmd-adv.txt
- http://marc.info/?l=bugtraq&m=120468784112145&w=2
- http://secunia.com/advisories/29230
- http://securityreason.com/securityalert/3738
- http://www.securityfocus.com/archive/1/489139/100/0/threaded
- http://www.securityfocus.com/bid/28097
- http://www.vupen.com/english/advisories/2008/0764/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40997
- https://www.exploit-db.com/exploits/5213
- http://aluigi.altervista.org/adv/versantcmd-adv.txt
- http://marc.info/?l=bugtraq&m=120468784112145&w=2
- http://secunia.com/advisories/29230
- http://securityreason.com/securityalert/3738
- http://www.securityfocus.com/archive/1/489139/100/0/threaded
- http://www.securityfocus.com/bid/28097
- http://www.vupen.com/english/advisories/2008/0764/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40997
- https://www.exploit-db.com/exploits/5213
→ the Explorer · watch your stack · NVD