CVE-2008-4636 in yast2-backup

Summary

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 10/21/2008
• Disclosure: 11/26/2008
• Moderation: VulDB entry created
• Entries: VDB-45218
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 8.4
• EPSS: 0.00191
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4636
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4636
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4636/