CVE-2008-5619

Published: Dec 17, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

Affected (2)

Products: Roundcube: Webmail

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Roundcube Webmail	Version 0.2.1 alpha
Roundcube Webmail	Version 0.2.3 beta

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (34)

http://mahara.org/interaction/forum/topic.php?id=533

Source: cve@mitre.org

http://osvdb.org/53893

Source: cve@mitre.org

http://secunia.com/advisories/33145

Source: cve@mitre.org

http://secunia.com/advisories/33170

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34789

Source: cve@mitre.org

http://sourceforge.net/forum/forum.php?forum_id=898542

Source: cve@mitre.org

Vendor Advisory

http://trac.roundcube.net/changeset/2148

Source: cve@mitre.org

Exploit

http://trac.roundcube.net/ticket/1485618

Source: cve@mitre.org

Exploit

http://www.openwall.com/lists/oss-security/2008/12/12/1

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499489/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3418

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3419

Source: cve@mitre.org

https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7549

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7553

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html

Source: cve@mitre.org

http://mahara.org/interaction/forum/topic.php?id=533

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/53893

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33145

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33170

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34789

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/forum/forum.php?forum_id=898542

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://trac.roundcube.net/changeset/2148

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://trac.roundcube.net/ticket/1485618

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.openwall.com/lists/oss-security/2008/12/12/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/499489/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3418

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3419

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7549

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7553

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.