← Vulnerability feed

Vulnerability record · CVE-2008-7313 · published 31 March 2017

CVE-2008-7313: Snoopy command injection vulnerability

Snoopy · Snoopy

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

9.8 CVSS 3.0 Critical EPSS 4.5% · top 8.8% CWE-77 · Command injection
9.8CVSS 3.0 base score, v2 7.5
4.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
26References
16 Jun 2026Last modified by NVD

Description

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.27 PatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/09/11 Mailing ListPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/16/10 Mailing ListPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/18/2 Mailing ListPatchThird Party Advisory
http://www.securityfocus.com/bid/68776 Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1121497 Issue TrackingPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/94737 Third Party AdvisoryVDB Entry
https://rhn.redhat.com/errata/RHSA-2017-0211.html PatchThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2017-0212.html PatchThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2017-0213.html PatchThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2017-0214.html PatchThird Party Advisory
https://security.gentoo.org/glsa/201702-26 PatchThird Party AdvisoryVDB Entry
https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264 Third Party Advisory
http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.27 PatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/09/11 Mailing ListPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/16/10 Mailing ListPatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/18/2 Mailing ListPatchThird Party Advisory
http://www.securityfocus.com/bid/68776 Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1121497 Issue TrackingPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/94737 Third Party AdvisoryVDB Entry
https://rhn.redhat.com/errata/RHSA-2017-0211.html PatchThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2017-0212.html PatchThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2017-0213.html PatchThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2017-0214.html PatchThird Party Advisory
https://security.gentoo.org/glsa/201702-26 PatchThird Party AdvisoryVDB Entry
https://www-01.ibm.com/support/docview.wss?uid=isg3T1024264 Third Party Advisory

Track CVE-2008-7313 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2017-2637Redhat openstack missing authentication for critical function vulnerabilityA design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed…EPSS 4.8%10.0CVE-2015-1842Redhat openstack vulnerabilityThe puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, whic…EPSS 5.2%10.0CVE-2008-4796Snoopy project snoopy os command injection vulnerabilityThe _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamat…EPSS 9.0%10.0CVE-2002-1959Nagios vulnerabilityNagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output.EPSS 3.9%9.9CVE-2016-9603Qemu heap-based buffer overflow vulnerabilityA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a V…EPSS 4.4%9.9CVE-2017-2620Qemu out-of-bounds write vulnerabilityQuick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could…EPSS 3.6%9.8CVE-2015-5741Golang go http request smuggling vulnerabilityThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP r…EPSS 2.7%9.8CVE-2013-2166Openstack python-keystoneclient inadequate encryption strength vulnerabilitypython-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypassEPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2008-7313), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.